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{54} System lor controlling the sHsiHfeutton ami use of digital works having a fee reporting 



iss control access to tn» csigfesi works. Upon detdfrnmft' 

sion that the exercise ct a usage sight requires a fee. r<s 
rsposfiory gsrser&lss a im reporting ifsnsscfccn (3C&} 
Fee reporting is dons to 3 eredri server s'30 t ). Ths erscffi 
s-Bi¥S:: eetets the fas ifssofssiatso-i and pswctaify 
transmits ii to a biiSmg CiSfsringhoiss tSOSi. 



{57} A See ;sc<xn;nt:ng mechanism tot reporting tass 
asscctatsd wan ths dstrssytiort arid of &<<$&m works. 
Us*ge rights ano' tees ass attached to digsiai works- The 
usage nghis dsfsis hw Sfcs tiigml work: s« ussd or 
farmer ci^'sibuSQd Ussge teas a;e ewectfseq: as c! 
a sjsaga right. Ths dBjstas works and their sjsap fights 
an« tsos srs stored in repositories- s'20t j The repossiof- 
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Description 

The prsssni inves-hon relates to ffis field of distribution and usage rs^his enSercemenf for digitally encoded works. 

A furfdamemaf mm facing me publishing and Iniormssslon industries as they consider etectiwic publishing is how 
•s So or raven- she Dnaoihorwed and nnaeeourised dtoMoti or ussags of etse;r«»c»iiy published rcajeriafs. gjecbonicsHy 
published maisdals are typicaiiy distributsd in a digstaf term and reersafed on a computer based system imn§ ins 
capability so tecrasts Shi; materials. Audio and video recordings, software, it-coks and multimedia works as© all bslnp 
ofeetfonicafiy pubismed. Companies in moss. trxsosfrms reeslve roywas for sash aooouroeo for a'aifvery of fhg mate- 
eats, e g. the sale of an audio CD at a retail outlet. Any unaccounted distribution dt a work mates in an urtpass soyafty 
?<5 (e.g. copying tfta «as3(© recosds-fg CD to anoines digital mea'aim.) 

The aase in ssshich eise-rooicatiy pubitshad «»rks nan be "p-erfse-iy* reproduced arid dtstnbuSssd is a major concern. 
Tiie transmission ot digital works over neSAWXKs ss commonplace One such wid-sty used ostworlv is \m internet, lbs 
Snserrsat is a vwdsgprsad netvsoiktaelliSy by which computer users m many unsversriies. corporations and government 
sntiteeomrnysicafe and trade ideas arid mfomtatteo. Corrsp uter bt; ■ > i?i boards found on she internet anci comrrasrcsai 
« neiwark&sucn as Compose?* csncs Prodigy aiio*f tor the pcsiingand rt'trieyingot digits information inforrnafcon serystes 
such as Diaiog aad t.EXlS/MEXIS provide databases o? curr*»-s5 information on a wide variety of top i A x 1* Sacio; 
wbtch wttt sisacorijafe me situation « the development and expansten of the hismooaf information int«88trueft«9 ffhe 
NM>. it ts anticipated thai, as the Ha grows, ins tssmreissson o? dsgiial works over networks vail increase many times 
over ii would fits doskabls to usfee the Mil for distribution of digital works wiihoai the fesi of wi;ios.n o { ^ snShorKiid 
r.cpvmg. 

Ths rnosi s,t:atgbito:'wa:xi way ;o cu?b sec c-un-ed disir:but;on is to prsv<jn; un«yibor«ed cop*, no - \j ^raism*- 
sion. For sxistsrsg rfiatsnais ifiat are dissisibuied in digital :;srn. vafious ss'agnaidsi ars ussd. m tns cssss of sdivsara 
copy pioisnfion sshoraas whicb W tba nwtow <sl ca&m lhat oan ba m<jds or whicn cor jyp; fhe ouipijt whan ccspysng 
is dsissteci have been smpfey«d. Anotiisr scftwis causes sottwaie so become disabled after a prscfetsrmwd psnod 
oi sirm Sjas lapsfKi. A tochnique usod for worksiafson sollwars is jo raqniio vt\si a sspoctai fianiw;sri3 d;;v;s;a trsiis! 
depfssonicntho V¥orks;af:ion incrdeffonhssoftmfStforan. a. a., sss US-A-4.9S2..0S4 »n}!t{«d "Meshed and Apparaisjs 
lor Protecftng Compiitsf Sottyrare Utilising Codod Fiifsr Nslwofkin Coninnorion mi m Active Codsd Haftiwafe Dsvsco. 
" Soeh cfevtesa ars provided v«fh the aoftwase a!5d are commonly referred So as ttongtes 

Yat: asiosnof schasrso is to Osstribats sofiwara. bat wf5!0b rsqniras a "-say'' to onafois sis uso Tdis is aj-npiaysd in 
se distflbciion schemes whew 'demos 0 of she software are provided on a awfom afoag wish the entire proauct. The 
dsspoc issn Ssa isaaiy «s«>ci. bus in osdar to ;jse m acfyai product, fbc H«y must da p-jrcSiaasd. 1>;asa oahass^s do not 
hindsf eopyli-ig or tiisi software once %m k&y is W«y pcrchassd. 

is is an ob|£jci of she pr;?ser;i inventors so prcwid© an tmpsovosi sysienj and fmtttcd fa conttoiimg 9m uss and 
distribution of digiSal works. 

The invention accordingly provides a system and msihod as claimed m the accompanying clalrm. 

irt a syststji for the s:©nisoi of disfridsalon arsd use of d:glSal wosss a tee ;epo;r:rsg snschanism for rsponing foss 
associated with such distribution and use is discto&sd Ths system irwfocses «t means i'or attecmng asagc rwjhfe to a 
digital wsrk- The a-jsgs rights define tsow she digital work may be used or fsatfssr dsstributsd hy a possessor ot the 
digital iso'k. Uaagss tssss ase spsjoitied as part of a .usage ngh;. The abiiity to raposf .usage fass may bs a ca5*ttcss) to 
•so ths 0!<src;ss of a usage right Furfher. dstfsreof tsss may bs assigned to difforsrst usage ngnts 

The presont istvontion enables varices usage fee scenarios to be esed. Fees may be assessed on a per use basis, 
on a m;;fef ad basis or based ost a prsdsSarr ained schedofe Pses may also bs; discounted on a .psedssersrsnsd schedule, 
or they can be marksd-up a predetemi*ted percentage {e.g. as a distributor tee;. Fee reporting may also be deferred 
to a iaSor Slsne. so aocomssiodate speesal deals, rebates or soma osher exteirsal infosmauors not yat avaliabfe. 

The. prosans Invanfion supporis uaage fees in an adomvs fesi'sion. Usage faes may bs rsportad for a composite 
digital worn, i.e a tisgitai -a-o^K comer sseci of a piuraisty of discrete dlgitai works each baving thesr ovsn usage rights, and 
tos disiiibiiSors of diqisai works. Accosdirsply. fees to rmM^ls rsvenae ows^ers can be seported, 

Usage tea report is done ?o a cmdis sarvsr The orsdii sen/sr coliacss fhs lee information and psnodicaiiy srana- 
snsts fi so » tJiliinp clearinghouse, Altosnsilvsiy, she oredi; server may have a pre-aiiocated crodrt wfilch ss decremented 
5® as foas ars tncsjrrad. In thfs alsarniitftra embodiment, ths credit server ssouirj havs; to ba perbdteaily reailocstsd wish 
credits fo snabfa turther use. 

A system and snetnod In accordance wish the tnyer^m wU now bo described, by way of ex&mpie. wstn re'^reiice 
to she accompanying drawings, in wh«h:- 

Ftgure f is a tlownnan iifustratiug a simptg instantiation ot fbs ooerssSion of the currently preferred eiTtaodimeni oi 
■ss the present iovenslon. 

Figitrs 2 is a block-diagram liiustfiKing tho various raposiiosy iypes issid tho fspes^sory transaction fiow boiwaan 
them in the currently preferred embodiment of the oresem invention. 

Figure 3 ss a biock dsagsam of a reposlsory coupled vwth a credti sssves so she cnrtently prelors-ed ombodlisien; of 
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th« present awsmion. 

Ftguras 4b and 4b are e»smpies of (enduing system as may m aislfied in tfts currently prcsfsftaei srobociiraant 
ot in« pressnt rnveniion 

Figure 5 fflsWiMM a cements fife isyoei tot a digital work as may be utliized in she currently preferred embodiment 
•5 oi She present invention. 

Figure 6 isssisirates a contents fife iayoui for sb mdawdMai digits work of she digital work of Fi^ira 5 as may b* 
utiiized s's she curtsntiy prater? ed embodirnertt of the present Invention 

Fto,ur<5 7 iiiyslraies the componeefs of s description block of cenenSly preferred ernbcKtirnent of loo present 

?<5 Figure B iilustnsatos a description ires for the contents fife layout of in* distal work tfjyswaisd & Figure 6 

f inure 9 filtrates a portion of a description srse cor respond log to she individual digital work fiiusaatad m F igisre 6. 

Figurs to illustrates a sayous for tins ugnts portion sUdescripison block as mayfes uMfctm m shecurrentiy-pffifsrrsd 
wnbodimem of she present Invenhon. 

Fiijitfs if is a description tree wherein oerfain d-biocks navs PRi^T usage «gr»t$ an« ;s srsed to if lii strafe 'stdes* 
« and hebisns" rotes for rssoiVing usage tigem edicts. 

Figure t:2 is a block diagram of she hardware components of a regositoiy as are utiteeci in the eusreoity pssfsrrad 
embodiment of the preseni imwsticB. 

Figure iSiss bwcK diagram of ths- functions: fic^icsp components, oi a repository as are utilized m the curremly 
preferred etnbc-tiir^sinS of she present invar-riom 

Figure 14 is diagram if-ij-jtraisng lire base components of a usaoe right m tb* currently preferred ^enoootrmnt of 
the present inversion. 

Figure 1 5 lists the usage sights grammar of the Ciifreniiy psefeneb ssribodiment oi the present investor;. 

Figure 18 is a flowchart 'msatmm® the stops of eoititicaie delivery, hotlfei checking sab performance tossing as 
performed & re^stfatw iran&aotiw: ss may ps p-sfformecf in ihs cufitrntiv prsfwed emijodimsnl of She- prossrri 
fiwootior;. 

FisjufS 1 7 is a ffowcharS giuslrafing Jbs sfeps oi sossioo mton^nan sxohaags mo ctocs synchroo^ation as may 
f;e porforrftocf in tho cwsniiy p;eferr--5d ambols-rsgnt ol ir;o pies-s^i mertticn after each repoatioy in the registration 
trsnsaeiior! has successful cotopiaJod lh« aiops described h Plgisfs 16. 

fiaure IS is a fewersMi iii^s;raiif!9 ibs bask; ttow tor a usage ffansaotioo. mcMig ttt* oowrw opoosoo aa« 
-Si> ciosing step. m&y foe psrforrnsa in lbs orirrersiiy prsterrsd embodiment of the prss^ns inveniior:. 

Figure 19 is a siaie aiaprarr; of serves and oifsni fsposiioriss in apoordanos w«m a f ^snsporE protomi followed when 
movmg a digiia? work iixxn ibe server so iha cliens tepositoriss sss may be pe-tossTisd tbe ensrsniiy preferred embod-- 
ioieni of she present inversion 

OM^iEW 

A system for confrcifing «se .sod distribution of tiigif&s works is disciossd "f ps prssonf invsntton ss directed io 
srippoifsip oorriioeroia! traesaoiloris ievoivirsg digiiai «rosks, 

Heiotn ffte terms s cis|f!ai work 1 , ^work" er^d "coraen;" rofer So any work SSiaS has been O5dos;;^d so a dipj;a: (epfa- 

•to seossstioo. Tbis would inciude any audio, video; Xmi. or mufomedia work and any aeeompaoyiog inisrpreSer ta.q. soft- 
ware) to may be required lor recusing she work. T'ns tem cornposise work refers to a diojias work oosrsprissd of a 
collection of oshe-t o'sgrisi works. Theism) k tisaae tv$m*<x "rights" Is a term wfrich refers to rights giansosritoa reoipfent 
oi a digital work. Gsrssf&iiy. tbose riohis cSetes how a digssai work oae do used snd 8 st can bs f^rsher distrifouisd Es*rj 
uaaqe slotsS sriay have one or i'no;s specified c«ndrS:oos wtiicr; srtesf be isaiiafied before ths rigi-it may foe exercised 

*s Fiopre 1 is a hitih iovel frowohsrt orniff ing vanotis a'aSasis out yfam dersionsiisies the oasis oportitioo of tbe preosni 
invention Ffotsmog to Fi-guro t . a oroaSor crsatas a drgisai work, stap ft) i be erasrior will tbsn dstermses appropriass 
usage figbss arsd iees. attach mere so toe digifai work, and store \h&n m Reposisosy 1 . step 102. The dsfsfmrnaiion of 
appropnats ijsafjs flphia and fees wiis depend on various eoononve S'asfofs. The dlq:tei work remains seenreiy in Ffe ■ 
posiiory 1 usif il a request for access m secesved. The request lor access n&gm wifh a sessson !b:i:ahob by anoiber 

se repository, l-fere a Repostioiy & intiiaies a session Wiib Repr>sitory 1 . step 163 As wisi be described in greater desasi 
brsiow ibis session ioitiation inofcdos etsps which hsips to irssurs shst ihe rsspoctsve i'sposstories are iresiworsby As- 
suwm9 lhas a session can be established; Repository 2 may men request access to tbe Digiia; vVbrk for a stated 
parposa. step 104. The purpose may be, for example, to prior the digliai work or to obi;5.:n a copy oi fhe drgiial woik. 
The purpoee wiil correspond to a specific usage rich;. In any evons, Rspocltory 1 cbecse ine usage aphis associasccs 

■t®' with ths digkai wor k to determine if the access to the digisai wosk «say be granied, ssep 505. T,he crieck of ifre usage 
rights esBsriiiasiy involves ;s defer minfision of whether a rrgrit associeSsd syfih fha access request has been attaches ;;> 
the digits! vwk&nd If all condtsrons assooiafsd wish the rfohtars s&sisftod, i f the access is domed, repository 3 terminates 
she session with m error rnessaga. step 108. if access is granted, repository t transmiss the d:gtlai work to repository 
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2. step to?, Once the oigsai work has been transmitted to repository 2. repository i and £ each gesisrsaa bitting inter- 
malion-fertna access whicb is transmitted to a crodst ssrv©'. step 108. 3.ucn Seubie billing rsosrlma. is clone so insure 
against attempts so circumvent sne bfftsi^ process. 

Figure 2 tegsratss the basic interactions between repository types imhe present invention. As wi secoms apparent 
•s from Fkpita 2. the various repository types wits serve 3#ererU functions, it Is; fundaments! thai repositories will share 
a com set of functionality wfcfcr* witt enaole secure axi trusted communications Referring to Figure 2. a repository 
20 1 rsprssenss tne geneiai jrts&smcs of a repository. The reoosiiory 20 1 has cac; modes oi operation: a server erode 
axi a requester Ween in tbe saver mode, ih© repository wi8 »<s reserving and processing access; requests to 
digital worxs. Wnen in the requester rtioc!©. the repository wsli bo initiating requests to scosss oigiiai works. Repository 
re 20 1 ss geneiai s« the sense ;hat irs primary purpose is as an exchange medium lor digital works. Dunne, the course ot 
operation, the mposkofy 201 may co«nmur»«$6 wish a psur&sty o? ott»f repositories, namely authorisation repository 
202. rsndsnng repository 203 and master repository 204. Commun scat ion Petersen repositories occurs yitssxino. a rs- 
posirory transaction piotocoi £05 

Communication vssth m ajihonxason repository 202 rosy occur wnen a digits; work being aeec-sseo has a condition 
« reputm-sp an %uif»of«atiort Conceptually sn autnooxstiw is a digital certificate itxh mat possession ot the certificate 
is required » yum aecrsss so the oigiiai work. Art authonzsticsn is itself a dipi-ai work that can be moved between 
repositories and subjected to fees and usage rignts conditions. An snthoi-arstion may fee rsquireo" by bote repositories 
Invoiysd sn an access to a digital wors. 

Oorftinnrtleatior: vrsih a rendering rapossfejy S03 occuis :n owtsctsaj w:tS"s -ha swJet^g of a iSigiiai work. As 
bs dsscribso in orsatsr tictaii s&tow, a rsnoaring repository! is ooripisO mm a rendorino; devtea (e.g. a printor dsvicej 
to oompriss a reosering system. 

Oornij-iuairatajr; with a aiastei repossosy JGSocears m conneclsor; wisi? ohiamirig an idsnhsleaisoa certitlcaie. idora 
tiifcatton cof'fiscatas ars ths ttmm.t% whscb a repository ss sdsntitiod as "trasivuor-ny" . lbs «ss ot •rf$ni;'isatfon conit- 
icates is osscrsbsd bslow wstn nsspoct to tpa rsgistfatson transaction. 

Ftgisra 2 iitusifstaa this roprssitoty 201 coepted to a crsdsi arsrvar 301. The credit server 301 is a device which 
aecumiMes biitmg mformMicn tor !Pa r-sposstcjy 201. Ths credit sssver 301 communicates with repository 20 1 via 
Wirig !rans%etiof)S 302 ;o seccad b'tiiing a-sfnssctions B&ang t ran sac; ions sre repeated to a biiiing t'laartaphaitse 303 
by the asedii servsr 301 on a peisodsa basis. The credit sesvs; 30 1 commmknAss to the bitting ciearinghouse 303 via 
cisarincho'jso iransactioris 304 The cioaringnouss transaciforss 004 o^abto a secure and oncn/pisO transmission ot 
se inksfffiSiion to the baling oiearinghouse 303. 

FBjDEKiNG SYSTEMS 

A rendsang system is gcneraity dolmca as a system comprising a repository and a rendering ctavics whicn cars 

;k mndar a digitsl work mto its d«sirscs form. Exam-pies oS a fendersng system may be a computer eystem. a digital aedio 
sysicai of a primer A jendefing sysissTi has the sarae sseanty ieatiam as a repository The coepii;?g ot a rendering 
repository with ths rendering do«ee may occur in a manner susanSe tor tne type ot rsndonag osvice. 

Figure 4a iliesaases a pmw as an exampie ot a •sadoring system. Referring to F:g«i'e 4, printer system 401 rtjss 
r:cntaincd theses a printer «^cs84tery 402 and a print devise 403. it snouid be noted tt?at m the ctrsshssd tin;? ctejirwsg 

-a? printor system 401 cisfines a secure system borjnoary Gommuntcstions wisnin the boundary ars assumea to oe -secure. 
Depending on She security level, the ooandary also represents a harrier intended to provide physical integrity The 
printer repository 402 :s an tr;stantia!iori of She ;endenng repository 205 ot p:g«re 2. The pnr;;er repository 402 w& m 
some mstanoes cont&sri an ephemeral copy of a dipitai work which remams until s & pnnted out by the nnnl engine 
403 tr; other instances, the pnriter seposiior y 402 may contain digital works such as fonts, which wi!i remain and can 

*s be tsiiied tsasad or; use. Tins design assures tbrri: all communicistion lines fest^rai printers and printing oevices a>a 
encryptsd, unless they are wsifiin a physically secure boundary. This design leature eliminates a ootontiai -tanit v posnt 
tiiiouqh vvfiict; ihe digilat «osk.coaid be umpropefiy obtained. T't;e printer device 403 represents the primer oomponsois 
used io create the printed output. 

Also iStasirsied «rs Figure 4a is the icpository 404. Toe repository 404 Is coupied to the printer repository -402. The 
repository- 404 represents an external repository sbiob contains digital works 

Figure 4p san sxampte oi a compter sysiem ;ss a rsndsrlnp system. A computer system may constitute a e muiti - 
lunctlon" device since It may exeents digital works {e.g. sofiwsra programs) and display digits! wosKs te.g, a digitised 
photograph*. Loglfssily. eecti rsnder^g device can be Viewed as having its own repository, atttiough only one physical 
feposltofy is needed- Ptoisrnnp to Figaro 4p. a computer system 4 to has contained therein a d ispiayr execution j epos- 

-s 1500/4!!. The display/ekecution i-eposrtory 411 tsc-oapied to display device, 412and6xeci.itiondevlce413. Ttiedasbed 
box scrfonnding -he compijtar system 410 represents a. security boundary within wbicn communications are assurnnd 
to bs seenre, lbs dlspiayiexecution ?®tm&cw 4 ft is further coupied to a credit server 414. to resort any toss to se 
billed lor access to a digital wort? end a repository 41S lor accessing digital works s'ored tnerein. 
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Usage n§hss are aitsenea dirsctiy* to digitaf wortcs; mm. is is impor&nf to wS&ts&md the structure sracsigMi wot*. 
The stf ecrure os' a dsgrlai work, m particsdar composite digital works. may be nasaraiiy organised into an aoyeise structure 
•s such as a tesstfshy for exampio. a resgaaftQ hes various afiwies and photographs .which msif im/e bssn created 
and are ovsffisd »y d#er$m persons Each of <he artistes and sStstegraphs may represent a nods; *s a hsorarchleai 
stt«ctiif©. Consequents/, .controls, usage nghts, may be pissed on each s>ade by the creator. 8y enabiing eont'oi 
arw too- Wing to m assoeiatec; vsHh-sacft nods, a ct&Mor of a wws cars be assured thai im rights and teas ar« not 
cireyrrwerHsd. 

to in she cyrreniiy preferred embodiment, the fiia information ?or a digital work is divided sm iwo Sties: a •cofiisnts" 

fiie sad a 's&scrsptiori (res' Ills. Prom She perspectives of a repository. Sn« ''earsfenis* life m a stroasn ot addsessabie 
fcytss whose formal depends cofrspisssfy or? the snterpcetsf esad toptey. casptey- or print She digital wodc The description 
tree file makes :! possible to examine SS)e rights and fees for s work wrihoul reference to She content of She digital work. 
1 i should be noted thai f he s«rm description tree as usees herein esters to any syps of acyciic sir ucfttre uses to represent 

« she reiaslonship between the- various cornponsnls of a work. 

Figure 5 iltustraSss Use layout of a cements hie Referring to Figure S : a digital wosk *& comprised of story A 610, 
attrvebtsernent Stt. esory 3 612 and story C 513 it b assented fhst ths dsgrt.a; work is stored starting aS a relative 
aodrsss of 0. Each o? she pads of the digital work are sSored iineany so -has story A 5 ;0 is sScrsd ss apprcximsrsSy 
addresses 0-M0&Q ; afiSvestssesnerit 5« at addresses SO J01 -40.000. story B Si 2 ai addresses 40.001 -60.000 arrti 

se strxy c 513 at aiScifess&s 60.00t-S6K. The PeSaii of story A s -0 ss ilkissraSsil m Rgyrs 8. Referring to Figure s. she 
story A 510 Is bst$w broken down to show reset 814 stored as ao'dtes& 0-1600. eddler photo 6>5 a! acidrossas 
1 sm-t0,O0O. graphics 615 stored a- actresses 10 00 • arto sidebar 55? sSors-p ediress 25.001 -30,000 hiate 

iha! -he daia in ibe corstonis tile may oe co<«pfessed (tor -ssving storage} or erssiypiSfSi (tor sectjrity). 

From Figures 8 and 6 ii is mskfy oDssrvecs sfiat a rJigsto! work can be foproeenied by ns componeni parte as a 
Sxerafijhy: The daseriptson ttm tor a ctsgisaS work is comprised ci a sc; cl mMmi descfkstot obcScs {d-biockej. "Rib 
contents oS each d-WccK is describee; vwid respsettoFieere ?. Retorring soFfgrsre 7. a d-dioek 70S sncirtdes an idenSif-sr 
701 wOtch ss a en -que ideesilser 'or the vvork in the raposisor^ a stars ing address 70£ providing the start address ol the 
t:rs; byie of the work e latrgSh 703 givitrg the oumbe* of eyies si toe work, a ngbte porsicn 704 whetesi )he granted 
usage r:§h!s ano ideir statos csato are rnairstoiesb - . parent pointor 705 tor pcisiitng So a parse! d-foiock an<i ehskl pointers 

ss> 706 tor poirtsing jo toa chiid d-bfocks. in the ourrsnsiy pt$w®S eetbodtmeni, the identirler 701 Oas two parts. The hrsi 
part ts <s unique mtmt assijpsec- to is?e fsposi-ory upon rrantiftjcttiro. The secorto pah ss a imiqus number esssgaed 
to Iha work bposi ersalson. The rsghse ponton 704 wiSs eoniairi a data strucsera. such as a took-yp sabla. wSiarain toe 
vtsrtouss triSorfnaSKitj assocsaied wttb a ngb; i» triasrsiajned. The jnftmresiiort mqpir&i by the respesctive asrj.ge rsgSrts ts 
o'escribed in mors dstoii bsiow O-biocks tomi a strict hierarchy. The Sop d-block ot a work :has no parens: ail oih&r e- 

;k blocks have one parens. The teiasionship ot usage rights between parent and child d-bloete asid how cornets are 
tesoived is desesibed bsiovs. 

A specsai lype ot d-blook is a "sfsefi" d-slock. A shell cstolock aeds no nm cohtesii beyond She consent of its parts. 
A shall d-block >s used ;o add fighls and lea intoftrsattosi. lypicaiiy by dis;r:bidors of digitai works. 

Figure S tifosEratoe a rieserbf ion Ires for She dsgitoi work ot Fsgcte 5. ReSsrftng to Fsgese 5. a sop tt-bsrssk 820 for 

•*o the digital work points io the vafious stones and aeverlisen>sels eoeiained there-o. were, toe top ci-bioek 820 points So 
d-btock B2i frepnssehtirtg story A 510). d-dioek 62 S irepresantisig Iha adverissenierss 5n }. d-biock623 b^prssenting 
s-ory B HI 2j atrd aed d-btock S24 deptesefrisnc; siory C 51 3}. 

The pottson of the description Iree tor Stoty ASfO ss sllnstfatod in Figure g. D-b;oek 9£S represehSs text 6s4. o'- 
clock §26 represeaSs pfsoto 81 5. d-biock 927 represer its gtapbles 61 6 by urn d-bloek &2B tspresenls sidebat 61 ?, 

*s The fiebfe ponton 704 of a dssoripiorbSosk is further Stihstratod In Psgijre 10 Flgere 10 ikustratos a sfraetsjrs whieh 
ss rspeateo tn toe rrgnts portion 704 for each nahi i^efoning So Figure 10. each rsgbS wtli nays a righi eocie tielo -050 
artd stales, iniorrnalion iteid 1052 The r:gt?l code Held 1050 wiii contaift a unique code ayslgnad to a right The States 
ietormaiien field 1052 wtii eentain infofmation reiaSing So the state oi a ngh! r :! nd She dsgitol work. Stjeh Information ss 
ittoicased tssiow tn Table t, The tighis asssorad m She rlghls portion 704 tnay iypteaiiy be « wca&tmi order based on 

5® the nghi code. 
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TASLg 1 



DIGITAL. WORK STATE INFORMATION 




Value 


Us* 


Coples-ln-Use 


Number 


A coynts; of the rmrnfsei ot cop»?s of a work that are pi use Inc'cmerited when 
anoths; copv «s used (tecrssrtsnted vshsn use » cofapieiod 


Loa:>Poriod 




indicator e#«»» maxsrnam number o? time-units mat a document can b& losmo 

Ot!t 






Booieae 


Indicator thai She cttn'snt wofk is a loaned cart copy of an auitiixtjxro' digital work 






inoteaiOf o* m« remaining IfiT*© o* us® G:i a rmtsred document right. 


OocarosnJ-Dsscr 


String 


A string conlaiainc var bus- identifying informaiior; shorn a document. The esse; 
format o! this is not spooihed. but It can snofode leioeriaiion such m a publisher 
rsams. autnor nam*. SS8N number, and so on. 




RO-Dascr 


A handle identifying a reysmtt ownsr for a digital work. This is used fepostin?$ 
usage Teas. 


Fi.ibticatlon-Date 


Dais-Deser 


data that 'be digitai worn was psciished 


History-list 


HiSlory-Rec 


A list of events recording Jb» sepostorles sod dates tor opstations tfiat copy, 
transfer msckxsp. or rmiom a digital work. 



The agproacn tor nspresaaSiiig digtai wosfcs by separating description mm It*** tm-ml assumes that parts of a 
2$ fife srs contiguous b«t iakss no position on >n« actual represao ration of consent in particular, ii is oeatrai to She question 
of whether content representation may saks an obieet oriemed approach, it y*«k< be natural so represent corstsnt as 
objocts. in grincspie. It may fee ceweroens to have content c&jscts that snciyde the billing strceter e- and ngdts informal son 
that is represented »> tne d-bsocfes. Seen variations »i she design of tr>« representation ars possible and are viabts 
aitema;sves out (my introduce prooeeevig ovemsad, s.g. she imafprmatton Gf Jhs objects. 
so Digital wotte at* stored in a raposiion/ as past ot a hfsrafentesi iiia system FoSdfsrs ;aiso tsrmsd m®<8.<xim ano 
s:.ib-d!fSclor:«s) oonisin ;ns dl-gita- work* as «e» as oth&f tofdecs Digifei works arid toldsrs in a toidor are orderse in 
alphabisficai o;da;. The dsgfta! works ara typed to r«a«ct how iha flics bxb trsad. Usage can Oo aissched to folclaas 
so thai tbo foider nmH is t-oa;so as » di9l!.aS work. Access to ;ne foider vvoufd then bs handisd in the samo fashion as 
any other distal K As will fts dsscr ibed In mo; e iMmi b&km. !hs corvtefits of ths folder a;e subject to the* own right*. 
;k Morsow. His mantisjernsnt rsghts rnay bs atttsnod fo fcfdsr wftiob daftec how fosder contents can bs managed. 

ii fyndsmentai soths prgssnt invention that ths usage fights acs treated as pah c? ibs d^tai woes. As ine dl^itai 
jo work ts diatrsbtaed. the scape of toe gtarsted r;sags r lehis wiii roiriain !he same or may bs narr ovsrad. Fo; exampie. when 
a digitai woh>: & tfanslsstco from a document server to a repository, the asags rigpfs may inoicrte the ngnt to tear* a 
copy tor a prodetarmipod psned of tlmo teatiad the orialnai rlgbisj, W'nm tne rapository loans out a copy ot the dlgltai 
work, the usage sighis in the laaaer topy teamed the n>»it set of f Iqhtss coald bs act tcs prohibrt any tasfhsi rsgfiis to loart 
oat the copy. The baste idsa ss that one cannot grant more rights tnan fhey have. 
4S lbs aitacn!T:snt of usage nghts into a digital work may occur In a variety ot ways, ff the usage rights m de ihe 
smrm lor an smirs dlestai wo; k : tt?ey eouid bs altecf;ed when the digllai work Is prooosssd ior deposit sn tbe digital work 
sorvor. tn tPc oass of a digital worfc havsng difforsnt ssage ngnts for She various components, this can bs dons as tbs 
digital vroik :is Dasng oraaled. An asjfhpfsng tool or digstsif work asserabling tool could be ubiized whseb pixrvides for an 
actomated process of aSaehlng the cssge ngnts. 
m As- will os described bslsw; mm a digital werfc is copied, trerisfgrred or foaosd, a "nekt ssf ot nobis' ears be 
specified. Tf;e"aext as! of rsgbis 5 will be aftscoed to tbe digits! work as ;• is tfansp^rted. 

ss SccaiJSO sacb paP of a digital wops may have tip om ysage ngirls, fftsra wrii do :insfaness:wi"i@re fba rights di a 

"contained pars' are different from its parent or container pert. As a mats, eonfilct miss .must be sstabllshed to dictate 
when artd how a rigfs! may bo eserclsod The hierarch teal strijcfute of a digital mtk facilltratas the enforcaf^er of aach 
rulas. A "strict" rale woeid be as follows: a right tor a part in a digltai work is sanctioned if and only If it, is sanctioned 
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for me par:, for ancestor d-btoeks eontainiftg the part and tot aii cisscsneisnt d-iafocks. By sanctioned &. ss meant that 
(1)mdb of the respsctsve pads must have me eight, and (2s any cemdrdens toe exercise, the fsgm are satisfied. 

it arso poss:hie Jo implement the present, invention umq a mors teMem wis. in tne more Semens rute. sccsssio 
the pad may be enabied to the descendon! pans which have rhs ught. but access is denied to the doscorsdonie which 
a do no* 

An exantpie cl appiysng both me etoeJ ruic and ieniont is :siustr;sisrf vssth reference to Figure 1 J . Referring so ftgurg 
11. & foot -d-btock 110.1 has eh« d-diocks 1102-1105. irs ihis case, root d-biock rsprssenis & mfiicjajsne, mi each d 
me efirfci d-biecks 1102-TtOS rspreseni-aritdss in me magazine. S uppose that a request is made So PMffi she digits! 
wsm represented by root d-b;eck f JO'S wherein strid' rufe isioisowecs. The for the root d-bfock tiO't snd child 
» b-bioefcs 1 1 02- tlGSats than exanwrad Root d-bbek 1105 srsd child d-bkxks 1 1 '12 and ? 1 OS have tssen gg anted PRlN T 
rights. Child d-tto* 11 G3 has not been granted PR! NT tfghts and shild d-tokscK 1104 has PRINT rights conditioned on 
payment ot a asafje fee. 

Underlie si.net ttrfe the PRINT light cartnes be exposed because she child d-bsbekdoss net have she PBS NT tight. 
Under iae teoient rota me resuii vwufcf be different This dsgiiat works represented by ootid d^Soeks r,GS and ttos 
« ooutti be printed end the diktat work represented by d-bioek 1104 couih be printed w kaog ss the- us&ge fe* * pasd 
Oniy the digBSivrak.reprsssnied by d-bkxk 11 OS ceuki not be ertrasd. This same iesuii woeid da accornplfsned under 
me sinci rute :? !h& requests vws dtf acted to ssch ot me (odiv«3«8t d^tel wsHs: 

The pressnt wemson supports various eornfetnates of aSiovvmg and disaikswmg acc«ss. Woreovsr. as w!« be 
dsscnbsd beicw. ;he usago lights Qrgrwtsr permits the amm oi a digits.! w»H so spjraiy si consirainis nsay bo imposed 
28 on the work by a container pan Ths manner sn v»he^s dtg:toi works may ns eewtiotiftd bsmttss et usage n^nts cwfisots 
wouki be tmpiefnoiitation spsciftc srtd wo«id depend on ihs natsjrs oi the dsgi^i works. 

2$ in the description of Figure 2, it «« ktdscatsd that reposiicsies come in various forms;. Aii repositories provide a 

core set ot services for ;ns transmission of digitai works. Tns manner m sbren digitsi wonss are exchanged :s the nasss 
lor ais transaction dotwssn ropositortea. Ids varsoea i-eposstory tjfpos dtf'ar m th« yian'tats tiinctions thai they psstorm. 
Ft«p>stet»s may be davscea itsemsisivea. o- thoy may Pe (ncespor«t»d snio other systems. An axanspia tsihs fersderinq 
foposiiofy 20S of Figure 2. 

se A mposstory w3i have associated wstb it a rspossory identifier. Typieaiiy. the repository identifier woukJ be a unique 
number assigned to the repository ai the nme ot maj^factufo Eaoh rep!>Sito;y wsit aSso be oiasssfied as bmng sn a 
pahiceiar security cte&s. Cedain eommunscatiops snd transactasns m;sy be conditioned on a repository being in a 
parikrus'ar s<5cuisty cfess. The various security oiassea are deaeobed in gsoaior deSati hetow: 

As * prerequisite to opefanoo. a repository wssl require possession of m rasntiticattori s5ersst;cete. idsntiiieatioe 

as certstscsitss are encrypied to prevent forgery snd are i&sesd dy & fvlasier repository. A master repository oiays the roio 
oi an siabodxatiOS: agent to ©nobis reposiioiies to recaive digiiai works Sders;iiicB;t:on ceniiscates masr be rspdatad on 
a periodic basis idsntiiieatioe certificates ere oesennsd in gioetsr dotasi beiow with respect to SfiS registration trans- 
action. 

A ropossioiy has both ss hardvwsfe and turi?:isonas esnbcjcfsment The firncisonat osritrrxiirnont ss typsoaity software 
•so executing on the rsardwafs snsbodirrseni. Aiternativeiy. the isjnctfonar embodiment may de embedded sn ids hardware 
embodimen! srich as an Appiicstion Spectfic integrated Circuit (AStCi chip. 

The tsardwars emooc&neni of a ieprssslssy wsii be enctoeed sn a eacute housing whsch if aompioniised. may sauss 
the repossfoiv to be disadied. The basse compononts ot the hardware es-nbodimsrss of a repository are described with 
reference so nigai a 1 2. Rot's; ring io Figure 1 2- a reposiioty is corisprsaed of a processing mesrss 1 20&. stoiapa systsi;i 
& 1 207. ciock f 206 and oxteinrsi infodacs 1206. Tho processing moans t20O ss cornpns-sd of a processor oiemant i JrOl 
and processor memory 1202. The processing means 1£0i provides controfiei: repository transact son and usage rights 
transsdioo Irsasiiona for the ioposiiory vstdons frsnstions ir; ihs opesrstion o! tsie rspo&i;o;y snob as decryption ana&r 
docoaipfsssion of Oigiias' <eorks and transect tan messages are aiso performed by the processing means 1205. The 
processor siemsnf 1201 may be a nsicropiocessor or other suitadSo conspytsrig coiripo;ions. The processor memory 
?^2vra}!d{yp^iisV^^f^^<>«^'s^^^}dOriiy y®mofies<f?Gy) and Ri3r>domAccdssy©rriorfes ^BAM}.-Sti* 
mwmtm woeid cos^tain the sottwsr« instructions utilised by the processor eientent ;20t m performing the fi.inctione 
oi the repository 

The siotage systesii 1 207 :s iribhe r s^osri prised of dess r iptor sionsge 1 §03 and consent storage 1 204 Tiro description 
tree storago 1 2D3 wiii store the description tree tor the digital work see the content storage wiii store the associated 
content The descripisoh tr ee storage 1 203 and contsr?f stor aga 1 204 need no! be o! ihs same ;yps of storage medium, 
nor arc they nscessariiy on the sarpe phy sicai device. So tor exampia the descrtpior storage 1203 may be stored on 
a sotid state storage {for rapid retrieval .d the description tree inforntatioh}, white the contest storage i204 ;«ay be on 
a shigh capacity storago such as an opticai disk. 
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Tm dock 1 20$ is «ssd to time-stamp vaaous tarn eased concerns tor usage rrgm* of tor metering usage fees 
which my be assorted *Mh Jhs drgjsai works. The eiock 1205 wii; m*» m wffitefrupSabie power supply, e.g a 
fesussy. m o.'de>r so roasitem ihs- integrity ot sns lim^-sEismps. The sxismai intertscs means 1 208 provides tor ihs signai 
connection jo other repositories and so a credit server. The externa! interface means 5S06 provides tor «te exchange 
* oi sig«ais vsj such standara rrrtsrtaoes- such as or Persona! Compear Manufacturers CswJ indusin/ Association 

iPCtvlCiAi standards, or FDD: The fsxtomai snterta.ee mssns 1206 may aiso proves network weme&wUf. 

Tim fnneironai embodiment at a repository is dssscfibsd with sefsiertee so Fisjurs IS. Roissnng to Figure I S. the 
mnctortat nnsoodirrient ts comprissd of an operating system 1SQ1. core repository services KW ; usage transacisori 
hsndtersJ '303. repository specific foneitons. '5304 and a user interface 5 305 The operating system f301 is spscStc 
to She repository and would typicatty depend on the typo oi processor b»if<sj used The operating sysiorrs t 30! msjlS 
also provide the besic services for con&ofimg sne inieffasrrie between fhe basic components of ths repository 

The core repertory ssrvfess 1302 comprise a m o! turtcttom rsquireo by sach and evsry repository The core 
repository services '■302 tnciude ins ssssiors infection tssrisaclsors which sm defined in greater detaii mkm. This sat 
oi services aiso includes a gsnsw Ucfcsi agent which is used tcs *puncft* a ctigtiai rsesst and a qenene auihon,?a!sor! 
rs serve: for processing aeihor<?3hor> specifications Oigilai hekeis ana authorisations sre specific mechanisms for con- 
trdiing the disiribubort arid use of digitai works and are dsscnteS «n mare detaii beiow, hiote that coupisd to ;ha core 
repository services arc & plurality of identification eeri testes ?30$. The identification eerirrieatos 1306 arc r«quareel to 
ectibia ihs use ci ths repository:. 

The usage Irarisssctscos haodicss 1303 csmpssse ft^ctei&isSy for procrBSSig access iaqLiesis; !o digital w«;ks and 
28 tor Piirsg frses pased or; eccoss The usspo sracsaottons scpporied wsii be drrrsron; for each repository type, ^or ex- 
ample, a (my mi bs hecessary for soma fspositoft§& lo handts! access rssqcssis tor dsgaai works. 

Tr-s roposiiory specific iyricibnaiii)' tS04 cosrspiisss ivrscdonaiify ihai is uosptio "Eg a raposiiory fo; exasnpis. ti'se 
mmlm ;'eposiioiy has spacssi tcriciiocaiiiy for sssujn^ eignai ssnsiscsJtess and irsainfoinif^ eccrypfioa toys . Tfces rrsposiioiy 
seecitio fcrtcsioncsiiiy 1304 ww*J mcfam !hs user iniertci.ee trripiementatiOh for ihe repository. 

ss 

For sorn« dsgiEa- works the iosss:; caused oy ar-y individuat ;os&r;oa d uria«if;orsi;sd copying is msigoiiscar;; arid 
toe chief economic; concern iies at assenng the convenience of access and iew-ovsrhsao biiiirrp in si«h cases, simple 
a>? and insxpansive handheld repositories mi network-bs&sd worksl&UGns may be «,ui$abis repositories, even tiiocrsh ins 
irseascres and gaararsines <sf scenrriy are modest. 

A; the otiier extreme, some digital" works such as a a^ttai copy oi a first tm mom or a beam? bond or stock 
csriificaia would da of vary high value so thai it is prndont to ersjpioy cairtrci; arid tattly elaPoraie scounty ineasurijs to 
ens-jj's that they arc not oopisd or ioj'gsd. A repository suitable tor hofoing sccti a dtgt&j work eooid have slacorats 
•i- :: iTses&tifes tor ensysmg pbysteai intsgmy and tor verifying acihonttetion befcre trss. 

8y arrangs'fg a universal pasocoi. aii kinds of mposri;c;hes can wtmwmkatoi wiiii each oihnr «\ pr;ricipie However 
creators oi some works ml want to specify thai ihsir works wiii onfy be trsesf crrcd lo repositories whoso ievei of security 
is tiigi-i sfjough. For this reason, docuinsni ropositonea iiavs a ranking syates-r; for ctasses arid bvsis of security. The 
srscursiy clascsss in tne riiirrrsntfy prefarsed osribEXismnnt tsrc dsss-cribsd in Tfibie S. 

40 



TABLE 3 


BepOSfTOBY SECURITY LEVELS 


Level 


Gesciiptta-s of Security 


0 


Opes; system DcKSjnsent iiansmission is unencryijtsri. No digiiaf corisficaie ss fequircri for ideniiiicaiion. 
'i'ne seciifity' of the sysf em dspenos most ly on user honesty, since ooiy mocssf knowieo'ge way oe needed 
to eucurnvsni itto sscuvrty measures The tesosiiery has no provisions for pisvonhrtg unnjihori^od 
programs trom ."unntnpsnd ^coassinrjOf oopyiegtiies ~hs system doss not provent fha use rjs removabis 
storage and does no; ene;ypt stored {iiss. 


t 


fvtsiimts.i security Like ihe pravicstjs class escep; thai stored tries are minimaily encrypted, inekiding ones 
on r$rnovat5ie storstgo. 




Basic security Like tiie psevious class except thai speeiat tools and knowledge ares required to 
eomprorriiss: the programming, ihe contents of tt;s rrjposkoi'y or the sksse of the clock. Aii digital 
communications are encrypted. A digifai oertiticais is provided as ideniiiicaiion, Medium isvei enorypiion 
is u&sd. Rspositoiy idantiffcaiiori iiurnber is ripforgeabie. 



&)nfeu;shofj oTthe Tablaen the riexi page 
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TABLE 2 (continued) 





mPO&VCm SECURITY LEVELS 




Level 


Dsscdpiiofs of Secanty 


a 

?0 


3 


Gensralsecumy. Uke the previous class pktsti^fsqtJlfs^nsof spscis'jc^i&afsns^rftocornsfcwiss 
8)3 physical Integrity of the repository and thai modes! encryption is used on ail tfarsswissions. Passwxd 
protection is rsquifsa to use the focal «ser interlace The digital dock system cannot b® reset witnou! 
authorisation. Ho works <m<M bs stored on f3rrsov&&& sioegs When executing works ss piogrsum it 
f««& tfiew in thesr ova; address space arid does not gsve }h«m direct access :o any ii& storage or other 
memory comamlng system eotte or works rhey can access works omy through the transmission 
transaction protocoi. 


•>.s 


4 


l.ike She previous eiass except that hied level socrypboa is used or; aii cernrrsieiications Sensors are 
ased to record attempts si physical arsd electronic tampering. Aiier such taropetirtcj, ihe repository vvsSS 
not perform otner trarifsactions uraH s has feeorretf such isrnperlno tos dossgrtated servsr. 


SO 


5 


Like the orsvSoas class except itm ff tfte jsnysical or ciigii/a! ariompts a! tampering exceed some preset 
•hrsshoids ihss mrssten she physical imegriiy of the repository or m inte-paSy of digsta! ano cryptographs; 
barriers, then 5h&repoasiotyvv!tiaaveoii§ydocun!i3«tdescr:piionrsKXi!'dsol history butwft srass ordestray 
any d!9it«i!.ici^it<t}sf s thatcouidoe misused if feieassc-tean unscftjpufeus iUisonKicafissajnycert^eates 
of feuthemicSy so indicate that the physical system has bssn aworowiisea h efco erase* the contents, 
ot designated documents 




6 


Like the prevlonseiass except that the repository wiSialisrripf «?i?$tacorr^nteionto report tampering 
sod will employ noisy alarms. 


ss 


10 


Tills would correspond to a very high Sevs' of security This server would maintain constant 
communications So rsmets seenrriy systems mooning sraosscHoo*; sensor roadsaps. arid attempts to 
circumvent security. 



Sf , 'i'nc c.h8f«cteri?at!on ot security ievefe describee In Taste 2 is no; intended to be ted More important <s ins idea 
o! having different security levels for different repositories. It is aniicrpatsd that new security classes and requirements 
will ovo-vs accrsrdinrj: Is socsal 3if«i:i}ons and changes in technology. 

A csor mistime is Droadty cistmsci sss the rnechanlsm by wtwsh a rssor intssacts wiin a rcpsjisry m order to mvoKe 
ti»fiSi3s6t(oos to fgftj access to a digital work, or ssxoroiss usage rrgots As descrsse<i above : « j'sposttosy aay fse om- 
hodioo' sn vanous totms. "TYie uss? inisrtace for a rsposftory wtii di'isr dopsndiiioj on ins particuisf esroodsmer!! Th§ 
«ssi- intsitaoe rrnay &s a graphical t;sor intsrfaco having toons sepsescsrtsng the Oigita! works and the various awssactions 
rt tnat may ee porformoo. The user intortaco may bo s paooraioo dsaiog In vfcm a rrsor is prcmpioo for intorrna-ron. 

The ussf interfaco asaif need not be part of the repository As a repository may fee embedded in some otnsr device, 
the os sr intsrfecs may ifisseiy ha a pait of 'lis dev:ics in wiiich the rsposriory :s srebsddsd. For sxasrspio, the rsposrtoiy 
cooict bo srjibedrjed In a "casO" that ss insasted into ac avariablo slot in acornp-if sr system The isss-r intcriaca rcay be 
a oornbinatiort ot a display, keyboard, cursor comro! devics aod soitwars exsreutsng oo the computer syslsm. 
^ A; a min»rHjm. the ussr inieijaes must permi; a mm to inpnt ifitosi^sSlon sue*! as aeecss ieqossts ai5d aiphs 

mmsm oa'a and provios toadfoaoii as i» iraosaottoo status. Tho ussr intsrtaco wiif Shen oaoss ths repository fes ioiiiats 
thesuitabistfSosactioristoasrv'lcaihs: request ahsrt^tsofepSitictJiavuserhitertacftwiSto^endorjtholyrKrtlO!^^ 
that a ieposifory will provide. 

In the present invention, foes may bo assocrafed with ths exorcise of a right. The requirsmeru lor pssymen! of fees 
is described with each vsrsior; of a nsagc rsgl;t m the usage iighis langoarjo. The recording and reporting of such fees 
is performed by She credii ssrver. One of the capabilities eoabled by associating fees wlib rights is the possibility o! 
^ suppoitiiig a rwlde mtt%& of ehorgiog mmw. The simpfess model, used by eoiivsntional sottwsre : is that there fe s 
sisigie fee at \m ttrrse of purchase; after which the purchaser obtains uajfmiieri rigtiis to ess she work as often and for 
as long as he or she wants. Alierr-iatsra models, include rnsSered use and variable fees . A slegle work ran have differ an; 
fees for different uses. For example, viewing a photograph qn a dlspiay ceeid have tfifte rent fees than making » hardcopy 
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of mcius^i; it w s newty &mm work. A key jo these aSem&tnre charging momte is torsive «-to» overhead means 
esiabftshinp, fees and accounting lot srsds! «j these ttrtirasaeJsofis. 
A credit server is a computational system that remfy itMiinorixes and records 'these transactions so scat less am 
bitted and pasd. The credit server reports fees to a bitting clearinghouse. The Piifir so. ciesringhouse msnaoes the financial 
•5 transactions as ihay occur As a reetift, bite may he gsrmmimS and accounts roeoncilsd Prafsiahiy the cf edit servar 
wonts' store me fee transactions and penodieaiiy cremrnur«ca!:8 vis a nsivwys wrfsh the tmisti} ci&aringhouse tor rscon- 
elation in such an «rr&odim«rn. araramKattas writ; the biiimg cieasinghoes-o wousd be sroyptad for integrity and 
security reasons, w another omfwsiment. the crecsit server acts as a "debt; card" where transactions occur in "real- 
time* aaainsi a user account 

?<5 A credit seivs; s& comprised of memory, a processing means, a cibck. and ioteriace means for coupling to a re- 

pository and a finance institution fa g. a modem}. The credit server wift aiso noad so have security and authentication 
tunsiionaiity. Tnese elements sre essentially the same elements as fhsse of a repository. Thus, a siopis devsc© cart 
be both a [apostesy and a crecsit server, provided thai it has !ha appropriate processing elements for carrying out ths 
corfespondroc fieocfions and protocols . Typieaiiy. however, a credit ssiverwottitf be a cardsfeed system in the possss- 

?a slcr: os' the owner of the creek:. lbs credil server is coupisd to a repository and would interact via tinanesai transactions 
as dessbbed below. fnSersosiona wish a financial insisbition may occur via protocols estaPiished by the linanoiat maSi- 
taboos thomseivas 

in the currently preferred embodiment credit servers associated with both ins server and the repository report the 
financial transact Son to the btiis'sp ainarifjijhoDsc. for assaspte, vsba;? a d:gria; work ss copied by or© repesitcay so another 
for a fas. crsdsi servers coapsac to aaon of ibe rapocstortas wis rspon ths transaciion to She &m>$ eisarinijhoijsa. This 
ss cisstmbfe in that it inserts that a rranseoiion WiSi be socpunisci for so the mm or soma breaK trs the cwamurstcstw 
baiwaars a crodrE sarvor arsd tbs tafijng ciaasssahousa. Hawovar, soma irnpiainarsratiofjs r;;ay asTibody or;;y a srnglo 
credit acrvar reporting tba transactors ;o rninirriijo Srarvsaciion piocsssing at tna tiss ot iostng some transactions. 

ss mmmmmimmm 

The present (aversion yjes stasarrtents in a high Saves "usage ngrns Sanaaaee" to dotoe ri.gh!i.- ».ssaciatod wMi 
dtgiiat wwHs and mslr parts. Usaga rigbSa sisiitstmrns aie ntsrpmted tsy raposrionea and ara asad to deiasn iine what, 
transactfona can m saccecstaiiy cansad o;ri tor a osgiiai wor-s and aiso to determine paramatera tor shose trans?!Ciions 

aa For sxampia. sentences m she iangnaoa deserrrstne whether a grvsn digs&i work can ba copied, when and how is cars 
be ased, and what teas ht' ;;ny! ats to ae charsjeo for that asa. Once ihe sssapa rights statements arc generated, tbay 
are ancodsd in a saiisbia form for accessing cfafsng ihe processing of sransscttans.. 

Oaiiissig ijsaga ciabis in terrrts of a iangnsge «\ corndtnaSion wan the htaiarch:cai ;ep:eaar5Sat!oa of a dso:ta: work 
eoabtes the support ot a wide variety ot distfiPutiors ano tes scbamss. An exasTipia •& the abri>sy ;o aitacn rr^Uspie 

;?s versions ot « ngsn to a work So a creator am ai$ « c - h ^ r^t to tr^ke 6 copies; for $10 00 ancf a PRiNT right to 
fsiaks uaiirnitea copies to; $100.00- A pcretjasas rrtay than abooao which option Post fits his needs. Another exatrspte 
ts thai rignts and Seas are additive. So in trie case of a composite work, the rsgnts arsd teas of each ot trse components 
works is used ir; determining tba s igtsrs arsd teas for ttsa w»H as a wfsois. 

The aasic ei>ntrsnta of a ngtu are ritaatissSad it? Ftgum 14. Reternnsto ^igura 14. a sight .450 Pas a transactiona; 

-re ccmponant 145t ano a specifications ccrepansns 14S2 A rsgpt: }4£0 has a iabei ts:g. COPY or PBJftj? i wmch indicates 
the use or distfisaiion priviteges tha; ere embodied ay the rigbs. The iransaotionai component t45t corresportds to a 
panieniar way In whrcb a digsvai work may be ijsed or distribated The f ransaasional corrsporssnE I45t is typicaiiy e-n- 
hodiec: in software instructions trs a repository wtiioh iaspterriani the use or ciisttibpiion privsieges tor tne nghs. The 
speoitica;iOi5s consporionta 1 452 are uasd to spoesSy coobstions wfsicb nsast be satisiiad prior io she right doing axorcrsed 

as or so dastgnate vanoue sransr;:c;ion reia;<xt pararriatera, m tna rsirranJiy pfijterred ernbodin-enE. fhesa specrhcasions 
incicde copy ceun! 1453. Fees and incentives 1454. Tsree 1 45b. Access anci Sscurtiy HS8 and Controi E.ach 
of iiieao spaoiiicairons writ ba described :n greater detas! baiow With ieapeoE to the iar;guage g&'renas etasnersis. 

The usarje rrp.nt s isng-jaefs is basao on tbs grammar descrtbed bskm A gfaiYicnar :s a convsniea; moans for 
detiriinp valid sequence of symbols for a language, to describing the grarsornsr the r-otaiion "fasbicf ss used to indicate 

5P drsiinc! choices among alternatives, in this ©Kjrnpte. a. sentence can have cither an V. V or V. it mast inciuda 
pxactiy one a? mere, 'f ee braces {} ms ussd to indicate OiSttonai itsms. Note sha; brackets, bars ano sracss are uses 
so descrtPa the ianguage d us-age siphts sentences bus do noi appear m asiuai aetitancea m.Ste tarsgustge 

in contrast, pafanttjases are pert of the usage rights language Psrariihssos are sssaa to group stems together in 
tests. Tba notation (x'j ssassd so indicate a vartabis iengtts iiss . tbar is a ttg; con taining one or mors tsemsoftypex The 

ss notation Ot}- is used to indtcasa a vartabte nus'fitser of itats containing x 

Keywords in the grammar arc words foiiowed by corona. Keywords Eire e. tsammm and' very speciaf ease- to ibs 
ianguags. They are otter? used to indicate a sirsgte vaiue, typieatly an ioentitter. in p-iany eases, trse keyword and the 
parameter arc- entirety optional When a keyword ts grver}. it. oiien takes a smgie iderrisfier as its vaiue. in some cases, 
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th« Keywerd tsKes & ssss ot idantite*. 

to the csags nghis ianguage. Isms is specshod m an honrs:rr;:m;;es seconds for nh <nm =»s representation. Timo 
20t5S indicators, o.g. pot \ai Pacific Daykght Isms, may also be «5«c*sd. Dsies srs fsprssoriiscs as ysar/ month/oay 
<or YVYY/MMM/OD). Note thai thess time and dats f^resentations may soeesty roomwns a- time or tmits of irne 
•s Money sitiiss m® spsc&ed in terrtss of doiiais. 

Ptnaliy. mm* csags rights language, various things" w«i need So imeractwsth saehothar Por exempts, an instance 
of a usage ngd may specify a bank account, a digiia} ticket., etc . Such things o«sd to bo identified and ass specified 
hew* using tn» suilnt MO * 

The Usage Rights Grammar ss listed sn its entirety m Figure 5 6 and js describee; beiov* 
» Grammar slemsnt 1505 'Digital Work Rights: * (Rights*)* dftfirre She digits work rights a;; s set at rights The 

mi d nghts attached ?o a digital weak defsne how -hat di-cpta! work may be transferred, used, psifosmstf o; pisyso. A 
set ot rights «f8 attach so ths entire rftg*si work and the case oi compound digital works, each of ths son-tponsnis o? 
the digital work. The usage rights d components ot a digstai may bs ditierertt. 

«; jsrsi^f <--:srr.*i« i 502 'Right : * -Right-Code ^Csspy-C«u«t| fCcsntrai-Spec) fnme-Spec} (Access -Sp^c} 
« {Rsef-Spoe};" esrtunrsef&is? ths contsnt of a rsgnt Each usage r*gtt> must specify a right cods Each r s ght r%y s&o 
optionally specsiy eoridliions which musi b« satisfied oetose he right can be oxaicised. These conditions are copy 
count, eoofrot. time, access arid fee conations in ths csrranity preferred 3rte3«u»\t lot ths optional elements, ths 
toiiowrog defaults apply copy count equals 1. no tirne limit on the use of Ihs ngnt, no access tests or s secedy Sows; 
required to am the ngns. and no 'fee readied. These omdiUons wift ench bo described in greater detei: Oeiew. 

it is iiiiporiant so tiote ihsst a digits! work may nave muitipi» varsions of a rtghs. ««cn haviVtg she sama rsgnt: code. 
Ttis mdiieis version would provicfe sitsmativs oondiSions and fees for acessstog the digita! work. 

Oir«:r;rna: ck;:r:c:": i ?0 '3 "Righi-Cods : ;= Randssr-Code i Tf ansoart-Csde S riie-Msr$3g«?r«{?r>S-Ccsisi Derivative- 
Works- Cod® CtwflgurMkKKJods* csisiirsgcishss etjd> of m spscs'ic rsgnts «to a paii(Ci.«a!' tight typo (afihoa^ each 
;sghi :s idcniiSjea by ciisunci right codes} in ihrs way the grammar crovidos & ;:at&!od c-f possibles rights tnai can bo 
%maois£os.i with parts oi dsnjteS works, in tt;e fciirswirig, isghis are d:vded snto crsiegciises for convsnienesi in oesnrfoing 
ihecr). 

•'>-«<«**,! efemcni t»t *r?ef«i«t>Coefe : - i'PSay . {Riayer; Riayer-iOj i Prjnv. {S^inJw: Prini«HD}f ». cat- 
egory ot rights aii *nvoivif;g i?;s <mk«^ oi ophs-oierat transitory ct non-digsiaS cop:«s ot ttie digi-ai weak .AJter cee the 
copses are erased. 

$%> 

* Ptey A process r>f rendering or pertorrcir-g ii dfpiiai work on some processor This includes sneh things as pfeying 

digital movies, pisytrig dtgirsi mo&K. eiaying a video gams, runhing a compter program, or a:spiaying a 
posrsf ;eni on a dispiay. 

* Print To rsnoer ths wotK :n a msdsum that :s not turthsf proisstsd by usage rights shsh as printing on papss 

Cj:ari"o.;:; eicr;; ^ni "i SO? 'Trenspcsri-Ccsda : [Cepy i Transfer i Loan • Reniainiric-^ights: Hesct-Sei-of-Righis-l 
{(N*xj.Copy-«Jght*: Keyset o? Rights)^ i;sis a c?iSogory ot rsghis invoking ipo i^akiog ot porsis-snt. usabie copies 
of tile digitaJ work or; oit;er rc-posttoiiss The optiona! NejChCopy-Righto doierri^s-.a the righEs ot the «c-;k aitcs it is 
snsrisposlod. it this (s coi spsoliiijo. U?oc too rsgnts on !ns iiar-epoiiod cr;i>y ase ths same as en ihe ongtriai. Tf,s optii>i>a; 
•*o Rema:ning-f-t:gh)s spsoity me rights thai rsmssn with a tiigM work when ii ;s ioartsd out. If this is n&i spactiiso. then 
the dsiauit is that no rrghls can os exarcssod whan ii :s ioanad ot«. 

* C opy Make a mm copy ot a work 

» Transfer yewsg a work {pom one :reposito>y So anothei: 

* loan Tempofariiy ioaning s orjpy \o m&iw reposifory tor a specified period g# Sirne 

Ciwntr-i* eienie:;- 1S06 Tfiei-f&ina^sniefit-Cade . ss Saclsup iSack-Ups-Ccjpy-Righis. N«x$-Set -<>1 Rights)! 
Rsstere • Dftiete i Voider i Direr. t.c<ry {^en-ieiHide-i.ocsi i Hide - Re-rioteH^srts-Hide-L.iiosi i Hid«-RiWft«5tft} J i-st? 
a eaiagory of rights ir;voiv:ng operistiOiis tc-f hio riBnagorneni. snoh as the shaking oi imhip copies to protect the copy 
SO owrssr ag;sias) catastrophic squ-pirseni taii-jre. 

Many software •■oansris ano' siso copyright Saw give a copy owner -nerigntto maksbackcp copies to pressor against 
c3tast;>jpi>!C faiicra of eqaips'rient Howwen th§ (mten% oi unec-ntioiiod backup copies j$ inhorsniiy at odds wsth ;h« 
ahiiiiy to control ijsage. sifi;;o an unconiroiied backup copy can be kepi and then res-ored even atter iho ar:tt;ori^ed 
copy was soia. 

® The Fife i-rianageoient rights sfsabte tn* rnaiong ana rastc-r ing d backup copies sn a way thai respects usage rights, 

honoring toe fsowsments oi ooth she copy owner find the rights grantor and revenue owssr: Backup copies of work 
descriptions iinciyding nsags rights- and fee ctetas can be sept coder appropri&ie protocoi mi usago rights wmsi s> 
other docon;e«! ioposiferies of sutiic:e(itiy high security. Fuhher rrgtits jpermR orgnni^aitoa ot dsgitai wofks tnto totders 
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whsen toamsofess are treated ss digital works %m wnoss contems may »e 'htcfeteri* ttosn a -party seeking to dsismcins 
ins contents of a repository. 



* Directory To hscis a ioidor ot its contents. 

W Oir<«ttrr*i otenw" > 507 ; ' Deri vet iy?-Woi ks-CcxSe : i £xi; act i EtKfeee f Edit {Process: Ptoeess-iQj] {hwxi-Copy- 

Rights : Next-S««ef Rights)" -ists a category oi tights invotwrsg tfa* use ot a «*g!ta! work to crease mw wotks. 

» Extmci lb remove a portion of awak for me purposes ot acting a new work. 

* SmfessS To inc-udo a work in an existing work 

« * Eds. To attar a dio;?a! work by copying, scisoting sad modifying portions of an existing digital work, 

C-aran-sat aienienf tS08 ''ComTguratio«-Coi3a: » Irtstrtii I UninsJ&Si' Hste a category of ngnte lor insi&iiifiq and 
uniastaiimg sofiwas'P an a repository nypicafiy a rendering repository.) This would iypicaiiy occur for im msta&iiicn of 
a am type of piayar within ths fsncfersng repository 



Grammas foment t-30& 'Next-Set-of-Rights : * {*Acter S«t-0?-f*So,ht*}} {{Delete: Sot -Of- Rights;] {{Replace. 

ss Set-.©NSights$ {{Reap: Set-Of-BSghts)!" defines how tigrsss are carried iotmrti tot a copy of a digiiai vwils. if ma 
Next-Copy -Rignts is no; specified.- tno nghis tor the next copy are tno same as those of the currant copy. Oiiierwsss. 
the so! of ngnts io: iho nasi copy ear; be specified Versions of nghis after Add ars added io She enrsem sei oi rights,. 
Pjighis attsr Deieta: are deie-ed hart; the cutreot-seJ of nghis. HenJy ngbi codes are hated afier Osieto:. then aif versions 
of ngnls with tnose codes are defied versions of n<$*i$ after Sepiace sunsuece m versions ot rights of )he same type 

s>? fn the current m of (%jm. 

it Remaining- Rights is not specified, mm fhs; e are no nghts for the origins; aftet aii i.oan cop-as ate toaned ot;;. 
if Rsmaining-Bic/ss'S'.is specified, tnsn the Keep: token car? be- ussd so sirapisiy ihe expression of what figms io keep 
behind. A iisi of sight erxiee foSowng keep means mat ait of :he vs«aoRS of ifiose iieiad tights are kepi m me farrsaii^iig 
copy. This specification can no evorndoan cy sue-scqticrti Delate: or Rapiecc spaoificeiioas. 



Copy Gwni SpBcsftexii&n 

Fa; various -rrs-tisaciio-is. si may bs drjssrabie to provide some ijn« as io ifja msrg&r d "cop.-es* of riia vvork which 
tnay b« ijxetcssed s-ifnuiianeocsiy fot -ha tiqhi. Pot nxarijpie. si tn-sry b« sfesstiJOie ioiimittho nurnbe; oi cqsias of a itigriei 
•so ViOtk f hai rr-ay os icanso oat a! a arm or viswsd af a i>me. 

Granimisr sisment 1510 "Copy-Cesynt : * (Copi®*; posfti¥«-i«tegsf i 0 f uttifenitftd)* proyidss a coadiiion which 
dsfifsss tha nur-5be; of "copies ■ of a wotk sutrjsct to jhs t igh! . A copy count can be 0, a fixed »umhot, or imfettsd. The 
copy-count is associiaiscf wish each righ;, as csposod so insre pssng icsf a singio copy-count ior tha digisai work. Ths 
Copy -Cc-urx for a tight is decremented each iime that a righs is exe-cssed. Wiiar; ihe Copy-Count oquais xaro. tfse agf;; 
can no iongst be 3x«to(s««. it the Copy -Count ;s noi spotified. tne tiaimli i* ooa 

Cmlr&i SpmificMtei-s 

Rights and tecs depond m ganetai <m rsgiits gian-sd by the cmafor as wet! as hirrhet ro&rxftcm s'eposed by ia-ar 
diSiiibaSors. Gonitoi spsciticai -ons dsai wfiti ims-aciirens beswsen the creator?; and tha:r dionhasots governing ilia tre- 
position oi fsjrtnor resirioisons .sad tsss. For cysmpis. a disifibyior ot a diastai work may not waat an and oonsamsr of 
a dig-iai weak to adci iaes or otherwise prefs dy eorrstnarciaiiy oxpioiting ihe puiOhasad d-gsiai work. 

Cirii^rfii}! ei^it^l '.'311 'Control- Spec . » (Corstfot: {Rs?stficfabie i Untes-Kiciabto} (Ur^hargeabit? ! Charge- 
•afet*})* provides a condiiion ;o spoeiiy 5:ha effect of usage fights and tecs of pamnrs on )hs sxerciso oi ihe A 
digrias work is fcsifiisabie ii higtsar iovai o-bioeke can troposs fcr-hot rassmcttcsns |titm epao:t:caf;ons at^d stcccss spac- 
it:cai:ons} on She nghr. ii is earesiticianie if no Jutsnst restrictions can Pa imposed. The def;n.i}i satiiop is tasiticfabia. 
A nrjht is anchargaaiois if no t«or« fsas <sm bs imposed on rha ess ot tha rsgar. it is cnafpsadis it mors ices can e® 
if:5pcsad. Thadefauti is chasg-eabis. 



» Backup 

* Restore 

* Dssate 
» coidar 



To rnnko a backup copy ot a dicyiai worK ns p;oiociiOn sgaiasi rnaosa i-;:icse 
To rsstora a backup copy of a dsgsiai vsosk. 
To aaiate or arose a copy of e &qM war*. 

To eseate arid rwm ioideis. m& to roowe files aadfoiders betwseri ioidess. 



* instaii: 
» Ui^nsiaii: 



To instaii new software on a repository 

To -arnov's existing software from a repositoty. 
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Thm $p&sit}miim 

it ss often dssira»!« so assign a start cists or spscsfy soms duration as to wh*n a nsbi way t>s exsreisssi Grammsr 
ctsmem i» :,- Tims-Spec : a {{fUetMntsrvsi i SJk««9^Rl*rva5 t &J*t*r-Time} Unlit: £xpirssicsvDater P'ovtclcs to 

•s specffssaisors ot tint© conditions on me sxsrciss of -a j;ghi. Bights may bo granted to s spoi;iiisd time. Diiierent Kitxte 
ot time spesffwatons are appropnsts tor m&m\ foods ot dtps Some «gra*. may be axs rcissd curing a fixe* and 
pfcdoiermsnsd clu • st«»n Some riqhts may be exorcised for an intsivai 5i?at starts She first time Sisat she fight is invoked 
by soma transaction .Somes rights may os exsrassc! or are charged according !o some. lend of mewed am*, which 
may bs spiii into ssparsts Intsrvsis. For sxampie. a right so view a pictars for sr» honr might b© spat into sis ten minute 
?a y:e<.w;gs ot lour fifteen minute viswtngs or twenty shrss minute vtwun^s. 

The tsmis "time* and "date" ato used sysjonymosariy to tstsrto a rriomsfif si time. There are sevgfai iands of time 
ssecifisaisoffS. Each spocitleaiion jepresoms seme Stmftation on She simss over mxto the usa^s r:ght appiiss Ths 
£xp<f3«ori-0at8 spocshes the moment a; which she nsago sight ends. Fo; example i! the Expisatfosi--0aie :s \3an 1 . 
18%.* sws the r^nf sods as ths tirst moment of t9S& tf the Expwet ton-Date is sspeaitocs as "fofavsr*. then ths sgnts 
« are inteiprsted as containing wmhtaA snd if wfy an etxpiraiiort dais is gsvon. then ins ■ sght can bs e,<sfpised as often 
as destfod unts! the expiation data. 

Srarnrnsi aiersisnt v Fi>:oddatensai 1 * From: Start-Time" is ass-d to define a predate rm sand interval SSi.ai firns 
fsom ina stars lime to the expiration date, 

<S:amr;;nr element tS14 "Sikjing-tnterasi : » fmervat: Use- Duration" is s;sed to define an indeterminate foi 
"opan") start Ursa, st sets itmits on a continuous persoo of isms ovot mkfr tha sjo^tsnts are accasstbto. The persad starts 
on shs first aeesss and ends attor the duraiioa has sasssd or ibs sspiratso:! daio ss feached, whicnsvsir eorpes first, 
for sscarfipis. if tne figh; gives ID houre of continuous access, the usie-diifaaoo vvosiid begio whsn the iirsi accc&s was 
mads aad end: 10 hours itifor. 

G^msv^if sisfnsiii i S'tS "SS«ter-Time: « Time-FSemaiftisisr Bsmaining-Uss" is uaop to deiiao a "mete: tans." ihat 
ss a maasuas of the nnie mat she r»gW <s actnaity axarcised i! dffiers {torn the Siidir^g-intesvai apiscSica-ron in ihas tho 
time ma* !ne dsgitat work is in use nsaci not bs ooaiiiUsorjs For axarnpis. if tha dgiits guarantss three days at asoass. 
ihcfse days couid be 'Jp:e%d oat over s nnontf- With this specihcatsoii ifie fights can bo sxatcsesd unt>? tiifj nieie? sims 
ss exi;aasted or tiro ojspsraitor! date is reacheil wtiichover cornea first. 
«o:T>a:r«ag-Usa: u Tims-Una 
%> Staff-Tims: ~ Tims-Uott 

i,isa-Oaiaiion: TsTiS-Ufiii' 

Aii of the feme specifications incfado lims-ynii apscificaBons in thsir aiiipiate irtstanttaitort. 
Svajiiiy Class arse/ AiJihonmU'on Sp&gitl&otion 

The present invention provides tor vsaious sec«f iiy friectraafsars so be introduced into a dssirjoution or ass scheme. 
G.vsmrs^: '5ia;r.cn; ^Sio "Aec;os»~Sp<se -. » {{SC: See«r«y-Ci»«s| fAafhodxatioir Authwizatton.fD'} {OJheo-Au- 
thorisaiion; Author iss 5 iors-iD*} {Ticket; Tscksl-tD)}* psovde-j a means fos festficring access and transmission As- 
anas spocshcations can specify a sacua'red s<5caray ciaaa for a rapoaifosy So exeic:se a rrgiri « a f aqairea auitjor^aisoa 
■to f ast thai most: bs saSisirsd 

ksywoid S SC "' is ased to specify h rninsrturr: seccrsty iovoi tor ihe ispositofics :woived so the access, if "SC- 
' s» not speeded, ths Sosves; seesarty Sevei ss ar;cepS;3bte. 

The opitonai "Authodssiticsn " keyv'rorcf rs ufesd to specity fequifeci stjjhof^atior.s on tha same ieposttory a& the 
v<ofk. The opaonni ' : Ot:tier'^«Shorisatioa: x teywofd >s seed to specify reguifod auti'sortaaiions on the other repositosy 
ioti-safransasiton. 

The apneas: v Tt«fc§t: : ' ksywofp spectfiss rh§ ioaatsiy ot a tickst recp&a tor tne transaofioa. A SransaoTipn irrvoSviag 
digiiat iicksts fnasi iocass an appropriate digrtai tsctei agent who can "punch' or oihonaise vaiidate the ttcker Pstore 
tfta iraassctfan caa prcaaad TiSKnts are dascabad in giaaSnr data!! eeJow 

in a Sraassctsoft iiwoivrrtg a reposrtory mvS a dGcynsaiif serws some usago rtghts may require that ths repository 
vi5 hava a parScatar arjthori?:aSion. that ihs serear have soase au*!or«8iioH. or the! both repositories havs ipossidiy ait- 
tersm} mMi&iits&tem. Aiiihorizations snamsalvps are di^ttai worKs (hsrsmtter fefsrred ro as an autnofixatton obtacs; 
thai can sjc atovsd hsiwaoa rspositonss in the saata rnanasr as oiiiar dsgfiai works. Thesr copying and ssaasfsmng is 
subject to the same fights and teas as other capita! works A tsposisory is sasa ;o hiivs an acthorrsation if thai asinoa 
tm'm obssnt is oomatrteti within ihrs rsposiSory 

jst soi:5o casos; an ariittositaisos msay ba reqatrod from a aoafco other tttan tho document serve? «od faprarrtory 
An aiithori^aSion object fBteioricsd by an Aainofixatioa-iD can contain drgitai address inforraatioa to be used to sat so 
a communications Sink heswesn a repository and m aMihori^ation soarca. Thssa are aaafogons to pnons nnmpers. 
fos sacti accass sssts. the oorasnuaicatiOf: wottkJ nesd to ba esiabitsbed and aaihof;28t:on obtamed ostosa tna iighi 
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cocic be exercised. 

For one-tssrts ;rs;igs a vans*} on Vw schsmc- <s to K*wa 3 dsgitai !iaM>t. Aticksl » presented to a dig-fai ticket 
agent whcsa lysse is specmsd on the SEisst in the simplest csss. a certified qm&tts tickes sgostt avaiiabis on si: 
repositories, is avaiiaoie to "punch* the ticket, in cti^sf cases. Bis ticket may contain address ssie. information tor iocaiino. 
•s a 'special* ticket aciesrt. Once a tsckel has baers ptifichsd. is cannot be used again tea the sairsa ks«d of transaction 
(ijniess if ;s ceppnehed or nsiteshed to ine m^nnsr described below.) Punching includes marking She ticket wan a 
tsrnestar rsp of she date and time it was used. Tickets st® digssai wofks and can be copied or tntmsf sned betwsesi repos- 
itories i&ccrCkng to ;hetf usage rsghts. 

in tee currently pfstsfrsd embodiment, a 'partctteo* tsekes he-comes *urt0unetHKf ot Vefreshsa' when it is cosies 
?c or extracted. The Copy aoa Extract ops-rates asve the date and dm as a prxspsiiy ot tns digital ticket. When a ticket 
agent is givsn a ticket it can amply check wheihs;- the dighai copy was niade alter the iast {its© mat it was puncftsd. 
Oi course, to* osgifal tcicst must have ;ne copy or extrsci usage tighis attached thereto. 

The capaoiaiy so snpunch a ticket is snporiant t« shs ioikswsng cases: 

« • A dicjitai work js ctrcuamt at tow cost with a iirrsitation that a can be used only ones. 

» A digttai work is circciatsd with a ticks! that car; be used once to give disooimss at purchasss est oiiser works. 
* A digital work « sircuiatecs with a iseks; fmcjaded in sh« putchase price tm posssfety mtemdm m ths wwJs) tnat 
can be used for a tutufB upgrade 

28 in each ot these cases, it a paid copy is made et tne etgisai work (tcciirding shs iicscct; she new owner wosjid expect 
to get a trash *; trnpenched; ticket whether the copy setier has used tiro work or not, in contrast, loaning a work or simply 
transferring it to another sepository should r;ot tmfi&bm the Hotel. 

Fees ami lne»ttiiv&s Sp&mtimtim 

Tns btiisng for use ot a digital work ss fendamentai to a comr«eFC(si distribution system. Ofarwaar Etemsni IS •? 
"Fee-Spes: =■ {Schedi:fed-Disc'Oj;ii} Reatiisf-Fse'Spes t Schsduied-Pesf-Spf/c • |i.tefkijp~Sp«c" r."C>v:d»s a ^c-pe 
of opisons for c<;iiinq tc; ti;e use of digstai works. 

A ssey imum oi tnse tspprosch is the devciepmsnt oi iow-ove-fn<5t:d biiiirnj tot ifansactions m poseriSiaiiy simll 
st> asTiOListis. Thus, ii heeomss fsastbts ;o coiiect tess o? oniy « tsw cesits essch tor thoysarsds of transactions. 

Trse gfsrcfnar rf:ti'Sienti;ifes netwesn ims where snc cti-rrge ss pes' use Mom those wnere st is m$ter«d by tr;e tsris 
ursit T;ar;s3CL:ons can cspposi foes, thai ths ess; says for using a digitai wosk as weii as :ricea;(vss paid by the sight 
graiitot to users to induce them to use or csstribrris ths PigSai worsx. 

The opiionei scnecuteci e'sscobnt refers to the rest of ins fe-e specsiicaiion-o.seotintsng st »y a percentage over 
;k trrne. it it is not specified, then mere ss no scrsedcied disoonat. Rsguiar fee seecsficatiorts are constant over isms. 
Scttisdcied tse spscilicstsofB c:vs a schsdsjia of bates over whsch ths fee spsciiicsrsiiotss char?gs. sViarkup specifications 
arc cseei m d-bfoeks ior adcisag a percentage roths tees siready bmq charged. 

Ccan-i-a; '{iornon; i SifT "Scfsedufed-Discoeiii.- ss fSchsJCiyted-Discousif. fTirne-Spetr Pe?c«n&sg*)*}* A 
iitiSP-DiBcotiii! is a csssfiiiaiiy a sr:tie«iJi;5ci sncs^siser oi any oiner fm spi5cit:ca;ion ior this version ot ihs right £>t she 
•so digiiai work fit does noi refer to chiie'ren or pereni dsgiiai works or io oiher vsrssoas oi rights }. it ts a fist of pasrs of 
times and percentages. The mosi rscesit x\me is"; the hst that has not yet passed at the time of the tfansactson is ihe 
ens in affect Ths psicentags gives she dsscosttf pesosr^age for exampis. ths mttfoet 10 refers so a 10% discccrii. 

0:ar--n : .s- t'c-mtr.; • c i'-i "ftegsiiar-FfMv^rxx-. ; = i (Fs«-. ! fnossntiv*. j 5F»r-iJs&s-Spe« i M«xef«e-Ra{«!-Ss5«C i Best- 
Price-Spec i Cafh.-or-Price-Spec ] {f^sn: Moaey-Uni; Per: Ti;vi®-Se;-«cj{Ma;<: Kteiey-Urist P®r. Time-Spec) To: 
*s AccosjuNDJ" prxss/idss for sevsrai kinds oi fse spscifictif ior-s. 

Fees are paici by ins copy-cfswnerrcser ie the raven ae-cwaer if Fee ss seecifieci. i nceassves are paid by ine revenue 
ovvrser to ttsc cser ii incesitiys: is spscstisd. it ths Site: spscificatioi? is givstr, ihesi triers is a mmimum fee to be chai gsd 
prsr ssnie-spec unit for iise if the fex specstscaston is given, than ihers is a maximum tee to he cnarged pet tirns- 
spec trj; ss use. When F««: isspecifssd, AsoounMD identifies the accoyrt; to whsch vsefsse sstobs pasd. Whsrt ii^contsve: 
S5 is specifier;. Accotmt-iD sientte-the ;scco;rnt from which fhs fee its to do paid 

(itmamt eiemen; 1 520 *Psr-Us«-S»se; s» Per-Us«: ^on«y-ir«if detincs a ssmpip f ee to be paid even/ time tne 
oght is exasossed, regas^iess oi Pow much time ti?e transaction takes, 

Grs:!!«rr«}s es.?ment \ { ,5t 'SSstered-RaJe-Spec :« Metered: Mon^-Uoit Per: Time-Spec* oeitnos a rrse^r<?sj.s.}»e 
tse paid according ro now song she right is axereiseo. Thus. She yrrse if ta-css to compiets the transacrioa detsrfttfnss 
ihe fee. 

Giamiise; cicrrrcni tSfr? -Best-Priee-Ssjsc := SBSt-F'r-ce: ^orsuy-unit Max- iVSoney-wnir « iisco io •;.:;; y a 
best-pnce sha; ss <fstermm« <&m the m&mi is settiod, Ttvs speciiicafton ts to accorrimodeto special dsais, rebaiss, 
ano pricing that depends on information that <s not avasiabta io the topossfoty Ail fee specifications tm de 'combined 
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watt Scfcess of autnofjzarkxis that coofd inornate jhst she consumer <s a wholesaler or thes he >s a preterms eysTomoit 
or that tne setter t>e anthonzsd in some vwsy. Jm amount of rwi«y ;r> the Max: -field « tde maximum amount mat the 
use wiii cost This is ths smourti inat i& tentaitvaiy dsfeitsd irom tbs ero-Oii server However, wben the transaction ® 
vWmmty reconciled, any excess amount writ be cswfrssrf totns eoosurtw in a separate transaction. 

£ Ta.Vnma; Ciemem 1S?3 'CslPFoePrSCS-SpSO ■ :: CatbFof -Pf iOif ' ;S S:rf;;i<j; tO « "S&St-P'iSe-SpSe" illSlt I- :S 

to accommodate cases where paces are dynamic. A Cair-Psr-Pr <e# Se®o roqutms a oommuniCi&Of* wsh a 
deafer to determine ihe pres. This option cannot be exercised jt tbe seposilory carrnoi communicate wiih a deaisr 3? 
w« utm mat she nght «$ exorcised is based on a secern iransacrte heresy tns cteaief names a ptm to exurcsse 
ihe flgm and passes afong a eSsaS oertitioata wbtcn ts rotersnced or trusted m tfto bmiRo. process. 

to C-iv^rr^: pfgnw* 1 n:bi 'SehcKSuJed-Pse-Spee: « {SehcKSaiec (Time-Spec Reguter-Feff-Specn'' ! - <o p : o- 

vide a genedttie of dates over w*uctt St© tea spectfeatsons cnaoqe The fees spectessors witn the mom vacant dais not 
sn ins tuinre js ins one tot is « etteei. This ;s similar to tan mors generai ihao ya& scneduiad discount it & ntors 
general because it provides a means So vary the tee agr earner ;; to; each irate period. 

fafsmrmr eiamsnf 1S2S "Markap-Spe*: » ftfetrfcttp: p^fcsmage To: AesxsMl-tD" is provided tor adding a pea- 

w ceniage >o if^e fees- ai'oaoy nssng chasgsd For e^mpie, a S t: :> ^dsknp nutans !hai a ses c-t S' : \. c-; canx:!«iiv« i'so &c 
tat wis! aitocaied io sha d;s;r:bijtor. A crsarkap specsficaJsoa can ba appirad soau.d !r?s <#tw kinds offes spsciflratssns. 
t! 1* lypoMf nsad « a adesi provide by a aioinbator jt raters So ts»s assoosateci wsh d-bio;A« idat are parts ot sne 
cw&ft o-Piock. lbs mtgni bs a ccnvenssni spseSicasKso tof use in tsxss or n rJistribyio; ovsthsaci. 

; - REPOSITORY TRANSACTIONS 

When a user raquas-s accsss to a digital work, tbs seposssory \m\ mtimiQ 9&mm trsnsactwis. The corarjjnsrbon 
oS iransactioois sivofceo w$ dtsj^od on td<s ap(5cri(ca;ions assfgrsrso for a ijsaga right Tnorss a;« ihrsso basic, sypes ot 
nans&csions Session fmttaiion "i'mrt&actiorss. Fin^nctai Tran&amions, and Us^ge Trani^oions Genora^y. sossson ins- 
tnsiion traosaoisons ara :t\iisa;eo ttrgi to aaiabiish a vaUci sesasr^n yVbea a vaisc! sesatoo sa eaiabisshart ;n;sr;i5;icisons 
cQiTsspondiog to iha vs<ious usao« nobis ara rnvckao. Fsnaiiy. raqnssi spea&e transacbons are psfformoo. 

Tnin-jncitans occyr boSwesn bvo ropasnorios (one aebncj aa a server), bs'wcen a ispowiory and n docofne<"tJ pay- 
back pmitxm ;o.g fer axaeaiion ot viewngV bntwaan a repository aad a crepri aasvar o; baSwaea a rapoaiiory arto an 
anthoraaiioo sarvsr. Wnon tranrsacbons occur bat^ssn mm ibao one reporter/, it <s assumed that thara is a miiarMo 
ae con^nxirricatioa ch^nnei between the rppos.:;onef> f- ; or exarrspia th:s co'db bo n TC^/ip chnnrjei o; any otbsr canirnar- 
ciaay avasSribie nbaojiai mat das builnrt aapabrsi-ns tor dassattag and rjorrootiog transmtsssoa ar«;ra. r-iowever: tt is no; 
saaon-ied that the comrnumaaiion chnrmei & sscjse Prov:&:or;-j lor s.scija;y snd privacy are ona ot ihs ram.in&?nmls 
for aoecrtyitig and srapiersteniifig rapor^iorias and 9m fcam im aead tot various bssosrscbaas. 

Transacts require that tbars be wm con-ifnunicjriion foeiwson repositories. Commanicattor! betvasen rspoer- 
trains ooenrs in units ietrrrad as iTiassagos Because ;he oorrirrmriicatsor; irne sa assumed to be ansecare. at! corntrti;-- 
otnaiions wan repiBitobns ihat are above the sowest sscartty crass are encrypspd utilizing a pub-ire key encryption 
-a? tecbniqrta Put>S« trey enctypiion -s a wsii knmn iachniqae in ;no encryption arts The term (toy raters 50 a numeric 
code rhat is used wstb eacrypiior': and decryption aigraitbrns. Keys pome in p&srs. *bsre "vvnting beys' are yecb to 
encrypt jteta and ^backing keya* ans used to decrypt data Born s'rr-tng and checking keys may be public or private. 
Pubiic keys am tbose that are distripatect to otocre Private boys are maintained in confidence, 

Key aianspeaicrrr. and seconty is snstscareniai in the success c; a pobiw key anoiyabon systeai ia the cutreoby 
praicrrao cnicodifnon;. rsno or more masts? fcpostiorias maintain ;ha koya and ereata iho idsonncaiion ccrisiitBtes 
used by the rsoosrtonos 

Wrier; a aendistc repostrory transmits a message to a sm®i*mq repository, tne sendirrc reposrrory encrypts aii o; 
its data nsinp ths ptibitc wttm§ key at tbs renaivmri raposrion/; Tba sending raposriory inaiiidas its narns. the name of 
th« fecaivifjg repository, a session idoraiiier sncb as a aonca {dssonbod betovsi!, and a message counter in each rrcss- 
vC sage: 

in this my, irts.commiinieaticn cart oniy bo rsao (to a nictb probabiiity; by too rseaiving repository wrsksh boide ins 
private cdeckrag key tea decryption. Tne anxiiiary data ss used to guard ssgssnai various replay attacks to secubty if 
messages ever arrive wsib the wrong coantoi or an oid tvonc&. the repositories can aaaama thai someone ss iriiericring 
waft communication and ths transaciion torrninaiaci. 

yna icspoctivo pubiic keys tor the rapoationos to bo used for' encryption are obtainad in the r egis;rsbon transaotsoa 
deacribed beiovir. 
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Session imtMtw Tmmaeitem 

A usage- transaction s samea oat m a session mim$<\ reposiionss For ossga transactions involving, more Shan 
ens repository, or for financial transactions between a. repository and a credit server, a registration transaction re per- 

•5 formed. A second transaction tanned a logs'* -ransaotion. may also be needed to mmt& ths session The gcsal of ihe 
registration fransaction is to establish & secure channet setwesn two repositories wtu> knew eacb others identities, As 
st ss assameci ihat #ie commsmlcahon channel between the repositories is reilabfs but not secure, Jhare is a risk thai 
a non-repository may mtmre ths prcaosoi in order to gam iitssgitn-nafe access so a repository. 

The rsoteiration transsctson setwesn two repositories is describee! with rsspsct to Figaros 1 S srjd 1 7. The steps 

?<5 bessribed ms irorn if re perspective of a 'repository. t" rsgi&tewg Its Identify wilh a -reposrfory^h The registration must 
do symmetrica! so B» same mi of slops w«i be rspeahsd for f3pcssiusy-2 registering its identity wrth repository- 1 
Referring to thgere 5 6. repository- 1 first generates an encrypted registration identifier sisp 1S0t and then generates 
a registration message, step 5602. A registration message (6 corspnsed of art identifier of a master raposifoiy, the 
identification certificate tor She repository-? and an encrypted random registration identifier. The identification certteita 

« is wictypm by the master repository in its pwa» Key said attests- to the tact that the repository {hens mmfoty- '■ ) & 
a dona llde repository. The identiifcattoa certilicate aiso contains a public key for the repository the repoaitQiy security 
ievet and a irmesiamp (indication a twm after which this certificate is no longer vato s Tee regis! ration Identifier is a 
namoer generated by the repository tor !his registration. The registration ieteniater rg isotqiss Jo m session an<3 ss 
orioryptBci if? repository i's pt'mSs The rsgisfrarion Ideatllloi' Is ussd to irr^provs socnniy of aiJ'hsniicaiion t;y ds- 

28 tsottng csriasn kinds o? corrsrtsunscsitons basod aftacKs. Rsposifory- 1 thsn transmits tha rsgisirsiilon mossago to ropes- 
itory-2. step J603. 

Upco r«cort/s'ig the fsgtsttiitsof) rssssagij. ;oposifofy-2 daterrnitm II st t?as the nosdeci pridilc k«y tor ths rsBStsr 
roposiiory. siop ; 804 if ropositojy-2 doos not have the noetioo pad-rc koy to fiasrypi tha idorriiticaSron caitsfscafo.. -he 
registration fisaisaetion tarmiiiates in m error-, step 3 612. 

tesmrtmq that repository-;? has the props; ptrtsiir; Koy S50 dent sfssai son ersrtifieaio is dfjcrypEsd, step 1605. Repos- 
itory^ saves ths encrypted rogistration idon-iiisr step tS06. and extracts iha roposstory sdsntitier sfsp }60r. fm 
oxtractsd repos-iiory fcionttfior is checked a-3».:ni.-5 s "hotiist" 0; cornpion-iised cioewn^ns repostoiss. step s 608. in the 
cisfrsi?% proferrsd embodJiTiisni. oast) r>;posl!ory will cor-rain h-iofitsts" of oornproinssad repositories, if rhe rsposrtory 
is on Site "not-isr. the rogrstrtsiion transaction terminates in an arrorpor s-op 1618. Sopositorsos can be removed trorn 

st> ths hotii&s wnsn their certificates sxpiro. so that the iist doss no! need to grow wsthost bound. Afso. by keeping a snort 
s'sst o? hrsiissf certiticaros tnai ri has pr oviossly rss;?5ivod. a repository can avoirs ids work of acttiaiiy {ping ihf oagn idrs 
tsst. Thsse lists >voyld m encrypted by a trrastor roposstofy A mew vsriaitors on tbs approach to improve st?iC:oncy 
wocid have !he rsposSo-ws first axchanae jfcsas of nasnos of froiiist sorifticaios, yitisfrafsfy exchai5girsg orrly thoss issis 
thai they had noi provtousiy raooivsa. Tr;o "hoifiafs" are immtewS srxS dissribytod r?y i^aste; raposriorias. 

rrft Hofs that mhst than terminating in error, the transaction ooufd rsq^asi that another registration message de sent 
dassd or? an sdenhticatiori cepffscaro croated fey anothsr rrsaster rapositoiy. It; Is may be repeated until a sarisfactory 
identitication certitteeio is toand, or It ts dotero-iinsd that rrrisi cannot bo esfabiserisd. 

AsscsTiifip thai ths repository as noE on the hotlist, tho reposrtory identification needs to os vefitiec;. In other words 
iepossiofy-2 naerts to vaiidBts ihat ths? rr?r>osiiory on the other s?5d is rsaiiy reposittssy-'s. Th:s is :ormad psrtofmarsca 

•so tesiing and rs performed in order to avoso invalid access to the repository «a a socnterfoit repository replaying a re- 
cording o! a prior session Initiation between rsposltory-1 and repository-;;. Pehosmance testing is satiatsdby repository- 
2 genafstit'sg a pedorinaoce rnessage ; step 1603. The psdonrrsoc© message ;s>nsists of a nonce, ths names of she 
respoetitrs rapositorlss. the \stm and the regsiraiiOft identifior received from repository-! , A nonce is a generated 
massage based on sorne random and variable inforrsaSion {e.p the iims or the temper-aturs.; The notice Is used to 

*s cnoek whether repository- ! can actriaffy exnldrt oorroct oncryptmo of a ntsssago ustng the private keys it claims to 
have, on a message thai ,t has never seer; Betas. Ths performance message Is encrypted ^sme ths pedis key epecitsed 
sn ths ragistrahon message o! ;eposito(y-1 . The perlormarioe message Is trw;sn>rt!e0 to ieposiiory-1 . step 1510, where 
it Is decrypted by repository-l as>ng its private key. step toil. Repository-t fhen ohesks to make scrrs that the names 

01 the two fsposiiorttss are correct; step 1.812< thai the time is msim% step 18.1 3 &m that the rsgisfrafiori identifier 
5C corresponds io she one li sent, step tSH. tf ar?y o# fhese rests taiis. if;e rransaction Is torrnrrestsd per step 1816. 

Assuming that ths tests are passed- repository- 1 transmits ths nones to reposiion/-2 in theater, step 16 ■ S, Fiepository- 

2 then compares me. received nonce to the enema! nonce, step 1 61 ? . if they are not identical, the registration tf ansactson 
tarmfoatas In an error par step 161S If they are tfje same, the roglsiratlon transactsof} has successSuiiy compif;!od. 

At this point, assuming that the transaction has not terminated, tha repositories exchange messages containing 
sossion keys jo do used m alt cm^mmicatioris during the sessrost arrd synchronic Sheif docks, f rgere 1? sliestfates 
the session rnfofmatron exchange and ciocK synchronisation steps (again f torn the perspective -of repoeifory- t } re- 
ferring to Figure 17, retsository-t creates a session key pair, step \7Q\. A first fey Is kept privets and is ased fey 
ieposltory-l to .enctypt rnsssages. T he second key ss a public key need by roposiiory-2 to decrypt messages. The 
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second key is encrypted using the p'totte Ney of repository-?, step 1 702 and is sent to repository -2, step 1 ?0& Upon 
recent. tspesiiofy-S decrypts the second key. step 1704. The second key is usees so decrypt rysessagss iivsubsequent 
oommuoications. When sash repository hes eoriipietod this step. «sey sre both convinces that the other repository ss 
bona tide and ihsti they are coiycmonieating with the ordinal Each repository has given the other a key to ice used in 
•5 decrypting tettthsr eorriraunieaaons Owing she session. Sines irsss key ts rtsek transmitted in the putsiic key oi me ie- 
eewwg rspesit-ory only si mi oe aoie to decrypt she key mkxi is oseet so decrypt subsequent messages. 

After the session information is «xchangsd. She repositories roast syrwronsiie their ckx^ks Clock syncnrooaation 
<s used try the repositories te estaoitsh m agreed upon t*tse bass ?c-f the fjtwic&j records ot their rnutnai ticr-isacitons. 
Rsterosip. fcagic to Figure 17. repcsrlory-2 initiates clock synchronization by generating a time starry exchange message. 
?c step i ?06. and transmits k to repository- t . step 1706. Upon receipt repository-1 generates as own time ssamp mes- 
sage, step 170? end traesnifis k back te repository--:?, step • 70S Rapesitory-3 doles the careen* lisrwt. step 1709 end 
stores the time rscesved from repository- f . step 1?10. Tneearrsnf feme is compared to sne tints received troro repository- 
1 . step 1 71 V- The difference is then checked to see if i! exceeds a predetermined tolocaoce (e.g. one trtmute), step 
1 71 a., a « Peers, repository -2 terminates !he transaction as -his may indicate tanipering wfttt the repository, step '713 
« ii oof repository-a computes an adjusted Sane delta, step i?H The adjusted time deiia i& the difference between the 
ctock time oi reposkory-2 and trie average ot the tiroes frore rsposrtoty-1 and repository--; 

Toaen«v8 greater tjce«tacy : repository-;? can request Retime 39am tiptoe fixed nanibsroS times teg. five times}; 
repeat the dock synchronisation steps, and average the results. 

A second session initiation transaction is a Logm transaction. The Logm transaction is used tochsok the amhenticsy 
oi .a user requesting a transection. A L.ogtn iransactsoc ts perttctriafty pruPeo; tor the autsiorixation of tinanetai treasrse • 
tions that witi be charged to a credit sewr The logirt transaction involves an interaction between the esss at a user 
intsr'aoe arsri tfro credit serve.! associated v^sth a raposrtory Ttse irsforrentiofj exsttangeP here ;s a Sopsn string seppSisd 
by the rspossio-y/cfeeiii srsrvor to ktentity itssii so tee asm. aert a Psrsonai ideritrircation Momfeer jPINj pesvicteP by tne 
user to identity hanses to the credit server in she evsnt thatlhe user se accessing a oredis sewer 00 a repository dittereat 
tor! tpeorio op wfkoh the ese; ints-rtstsce resides, exohafipe oi the iftiorrrsatksn vsroeiP be rsncrypied rising the ptibSicatjp 
private keys ot the respective repositories 

BHitog Tmtstictiom 

s»J Baling 'fa^nsaciions ara cortoernsd monetary transactions *v:th aorcdit server 8iiSirsg Transactions am earned 
eat when aii other cortPitione are iJ-iSiStserf and a usage tee is required for granting, the request For toe ajost part, s^rtiiog 
transadiens are weii rindorstood iri the state of the art. Thoss Transactions are between a repository and a credit secret: 
or between a orerist set ver end a Ptttifrg cieanrighoese SrtefSy. the required transactions sneiade the tottowing: 

ps * iTegist;¥:Sion and LOG it\t IransacSians by «hich the repository and user establish tbek bona fides to a credit server. 

These transactions woaid be entirely intend m cases where the repository arid credrt sssver are ire piere anted as 
a Singie ■ system. 

» Registtationi and LOG iN t;ar;sact:or;s, by which a credit server establishes <ts bona fides to a Ptlllec cieatingiioase 

* An Assign-tea f niiisarrtson to risstgrt 3. charge. The infrsrrrrai ion to ibss tr-ineacf ion would inoinda a fransar:tk>n icten- 
-se isfrer. the ideasiires 01 the repositories in the transaction, and « ttss ot charges from the parts of the digital work t! 

there has been any anescaf eveot in the transaction such as an interrcpiion of cornnianications. that inforsriation 
ts raoicdsd as well. 

* A Begln-charges iraasaction to assist a charge Th« transaction is much She same as an assign-toe transaction 
except thai It is used for rrserered use if includes the same In ton-nation as tfts asstpn-fee Starisactio;-! as irvelt as 
tee ntssge tee tnioiniasion. The credit -eesver is then responsible tor rurtn*t§ s ctock 

» An £nd-oharae& transacfioa to end a charqe for metereo use. itn a variation on Shs approach, the reposiSortes 
woaid exenungs periodic ctrarge letorntratton for each block oi tirnc } 

* A report -cha roes tfansacfion bsfvseen a personaS erepif server and a bitting eleerirjehosjsa. Thss transection is 
invoked at teass ones per biliing period, it ss used to pass aiong ititoisria-ron about charges. On detsk and credit 

5C cards, thfe iransactim wouSci efso be used to update balance irrierrnation and orectiS krnSts as needad. 

Aii biSlsnq transactions are gsven a trahsaction ID- and are reported to the credit severs by both the server and the 
ci:en;. . This redness possible toss oi billing iniormsstion it one of the parfrae to a transaction loses a banking card sad 
provides a cheat against tampering wkb $he system. 

Usage- Trsmsctims 

After the session inlt iabpri fraftsaciiotis have been completed, the usage request may fben be processed TO sinv 
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pitiy the description ot the steps earned cut processing a usage request, the term requester & used to refer to & 
repository in the request mode whteh is Imisattr tp a request; and trie terra server ss ussd to refer to a repository « Ihs 
ser* mods sad which contains- me desired digital «ork in rosny ossss seen as requests io punt or view a work, the 
requests arid server way he the same device and ths transactions- dasenbed sr* ths following would os entirety intsrrtai. 

•5 isi such instances, certain traosactiQR sieps ; such as the registration irarisaetion; need not be performed. 

There are some corrnion steps that are par; ot me semantics of ati of fh© MS&ge fights iraesaciiotts. These steps 
ate rotert ed to as the common tsarisaciion steps. There are \ wo sets --the 'opening" steps and ihe "cioslag" steps. Po; 
simpiicriy. mass are itstsad here rather man repeating them m the descriptions of aii of the usage rights srairtsactions 
Trgn sac irons can refer to a part of a digitai work. a complete dsgifat work, or a Digits! work containing other digital 

?c works. Akhoaah: not described in detail hasem, a transaction may even refer to a foider comprises: of a piuraiky of digkat 
works. The term "work* is nsad io rater to what ever portion or set oi dipitai works :s feeing accessed. 

Msny of the steps nm& involve determining ii certain conditions are satisfied. Reesil that each usage right may 
have o!i© or more conditions which musrbe satisfied baiose the right can da exercised Digita: works have pans and 
pans have pads. Oritsrent parts can nave different nghis and fees. Thus, it: is necessary to verify teat Ida requirements 

?a are met for ALL of the pads thai are involved sn a transaction For brevity when reference is made to checking wt^sr 
the rights exiet.and conditions for exercising ase satisfied, ii is meant thai aii sacft checking lakes piace ior each of ins 
relevant pans of tne work 

Figure IS illustrates the initial comnrtort oponscg and closing sts&s for a transacdon. m» pom* it is assumed thai 
repistretior- has ooceireP arid this* a *!«;;;;ac!" ssssion is hi eiaca. Gcri-jrai teats ma tssis on usage i-igi-is associaied 
wan !hs fo'dof eooddr^ng ;nc work or soms contsiniog toidar piphar in the fiis systsm aiofarcdy. These fasis corrsapaiid 
ro raquirc-fhoms irnposscf o;i fho work as a coesaquaace of m bm;)q on ths partisciar rsposRfsy. as opposed ;o oeiag 
aiiaoPed to the work riseii, Reisrsing ;o f sgusa 1S : pao; to iarisaiiag a usage iransaeiioa, -he raqussSer parforrns any 
ganerai -asis ihai are repusrad eatoio iha r:§h; assoaiated with she irarssacSioa can tes sxercssed. sssp, 10)1. For ax- 
ampis, iosfait. unins;aii and cteSeia figftis may be implemented to roqusrs ihat a rsquesssr nave an auihors^aiion csrtit- 

ss waie bafors if?a rigint aarj ba smromi. Anoidar ox;5«;pie is she saqeirarnaei -hat a dsgrEai Sis-set be prsseni and puriched 
Pafore a digS«i! wx\n may da copiad io a requasier it any of the garsarai fasis faii. !Pa iraosaof ioa is no: snidaied. s5sp, 
I B02. Assuming idst seen requifed v%m am passed, upon foceivsng tha usaoe rsqesst. ids servsr qsnerafes a trans- 
action identifier lbs* is used is records o; repasts of tde tsarisactior;. step 1 SOS. Tna server thar; cheeks wheihs; ttie 
dipifai work nas Psen granted tda rsgdt eorraspenoiep to the requss-ao iraeaactson. s;sp 1804. a ihs dsgiiai work has 

s>? nor faesn qraniao iha rioh; coffsspondifsg to the sscjusu the Iransaciion tenrirostss. step 1805. If tna digital worN has 
been granted iba repuesiod rsgbt, the server inae dsf$fmi«8s if the various canciliions tor exareislng she right ara 
satisfied. Tims based conditions ars sxaminad. step 5808, Thess conditions am cdacksd by examining ths time soec- 
if;£S5t:or; for the iba ve;s:or; of -be right, if any of the conditions aiane: sat:ar:ed, !he tiarisactior; terminates par etep 1805. 
Assumiap inai the isma eased conditions are sattsiiao. the server etiacks security and .acersss conditions, step 

•u ; 1 B07. Such security and access conditions are satisfied if: t ) ihs requester is at lbs specified security class, or a higher 
s»;curl;y ciass. 2) the server saitsfies any specified aattroriiiailoc iest and 5} the requester satisfies arsy specified m~ 
Ihoriiation tests and nas any required digital tteksts if any of tna conditions are not sails?:ea ihe transact io<i isrrnlnaies 
per step 18QS. 

Assurnirsg thai the security artd access corsJitsofis a;a ail saiK>itao. tiie se-ver checks ihe copy count condition, 
•so stap iSOS it tna copy count equate zs?o. then the transaction cannot na comptetsd and SPa transact ton terminates per 
step 1806. 

Assuming thai tho copy count does not equal ?ssro : iba sesver cttecks if the copies « tjse ior the rsqeested ilpht 
is graatsr tnan or equal to any copy count for the requested r ; ght for rsievant parts'), stap 1809 if tne copies tn use is 
greater ibae or aquat to the copy count, this indicates thai usage sights tor trio version of the t:ra;isac:$lon t;ave been 
exhausted. AscotrSing-y, ihes server terminates the transaction, step 1805. if the copy eoant Is iass tnan the copies in 
use for the iransaotioo the transaction can continue, and tna copies in use would be incremented by the number of 
digital works requested in the transaction, step t8:0 

The serve? then checks if tna d!gitai work baa a Loan" access rtght. slap tSit TbsdL.ofin'ancass right is aspecia! 
case since tmmxQ r^bt* may da present even Jhoogh ail copies are loaned out ii the digbai work has ida "loan" 
5C access: right, a check ts made to sas ii att capias have been ioisneb out, step 1 Si Tna ncrntaor of copies that couid 
da loaned Is tna sum of tna Copy-Counts tor ait of tna versions of the ioan right oi the digital work. For a composite 
vvork, the sotevant figure « the mtnlmai aeon of eacd oi the component of the compos:fa work, it ats copses hays 
been loaned out:, the rerrK$»iin|sr^htsar« determined. iJiap 1S13. The rerriawing-ngtjts isdBterrnsriSdtrom^ie rerrKJrnmg 
fighis spscificstione trom the versions of the loan right, it ibsra is oniy rsie version oi the Loan right, then the deter- 
minatlon ss simpic. The rerrsatrtin^ rights are the ones specified m ttiiit versiot? ot tda Loan ugh;, or none it Rsmainiag- 
Rights: is not specified.. It ihere are mutiipie vsrsioris or me i.roan rigPS: and aii copies oi all of tna versions are loaned 
out tpon the remaining rights » taken as the minimum sot {intersection! oi remaining rights across sit of the versions 
oi trie ioan nghi. The server then determines II the requested right is in ttie set of remaining rsghts, step tSU. if the 
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requested right *s not m the set of remaining rs$«8. the- server jerrrtirsates me transaction, step tSOS- 

ff Loan is rtot a ts&jge ngbi toe the Ssgfta! vsork or -if aiS copies have noJ been faanad oui or she requested apt t$ « 
the set remammrj rights, tee conditions tor to® right me then checked, step t8i§. This intkase various fmaneiei 
transactions between she repository and associated credit server. Further, any metering of usage of a: digital work wsii 
•5 eemsnenas;. if any financial iransaesion fasls. the transactors serminases per step 1805. 

it shodd fee noted that the order m which the eer«S8©r« are checked need no; follow me order of steps ? 808-1 Si s. 

At tfiis pearo. fight specific steps «te oov* performed and ara represented here as step 1S1.6.. The right spec* II c 
sseps are descnbsd m greaier detati bsiow. 

The comrnon closing smnsaeiiQC steps are now performed. Each of ins seeing transaclion slops are gertorrned 
?<5 t>y she server attar a succassiui completion of a transaction. Marring, back to Figure IS. the copies in use vaiae for 
the reqacsied sight is decremented by She number of oo»ss;s involved in the transactors, step IS"?. Next si trie iight 
had arrsesered asaoe tea specification. the server seoimcis see siapssd timetrem me Reim^ng-Use-Tirm associated 
wlii tha ngni far ®vssy part involved I;; the transactc-a atap 1S18. Finally If thara ase fee spectessorss associated 
w;tn the ngnf v we server initiates End-Charge financial transaction to eontirm mwt$. stsp 'iS19. 

Tfaosmissiort Prsfeseoi 

An important area to consider is the transmission oi she digital wnrx from ins server to the reqaesier The trans- 
nsiaaion pfotoooi described herein ralara to events cecurnng afSa; a valid session has been sieatad Tha irasjsmssalon 
protocol ms.:si candle the ease of disruption in the conrnsunscaiions petwssn She r^sosiio«es. it is assumed thai inter- 
ference sc-ch as iaseoiing nossa on tha corniTijnicaiion chanaei can be tieteciec! &y m$ inisgfSy cmscks, ;e.g.. pansy, 
chacksurn, etc:) ifsat are buiSt km> tf?e issrsapor! profoaci strsd skc rsjs diaaassea h deiasi harain. 

The unden^rtg gosn' in tne tfansaiissbn pretocai is to preclude certain taii-JiB mocies, snch its assficicas or aecioerita; 
sntefferencs on the communications channel. Suppose, for exampis, that a user suite a ears Wish the preost server at 
a apecihe time nsar iha a>d oi a ssiafissijcttcsf). There sho;j id not be a vainensbie time at when haiJiisae it?e card" caaaes 
me repessiiorses so t«i! to cfxreotiy sccixtni for she number oi cepses of the work tnat have been created Resisted., there 
ahoaid ba no time at which a party can break a connection as a rneaas io avoid paymeni attar using a digital work. 

if a iiaasaction is liiiefrapiea (and lasia). bolSr rapositaisea sesEoie the dfglias livorka and accounts to ihais state prm 
io the faiiare. mednio reaoros of the teiiure iieefr. 
ec Figure : 9 s a sta?e diagram showiriOj steps in tha prooeos of transmitting information ctermg a transaction. £aon 
bos represents! a siate tsi a repository in asiher the server reads (afetwe tha censr&i dnftasf line i aOI ; or «me reqassstei 
mods faeiow tne dotted iina s 90f Soiid arrows stand fortransSions botwaea ataiea. Dashed anow-ssvand for massage 
aamrnnniaahoaa aatweea the iepcsaoflas. A dashad message arrow posntine, ta a solid transition arrow ia IfBcr preied 
as meaning inat the treosiilea ttsum piece wfsen she message is received, unlabeled transition arrows take place 
unconditionally. Other laPeis on slate transition arrows dssenbe conditions that trigger ths transition. 

Ralernng now to Figure 1$. the aervas sa sniEfally in a state 1802 wtisre a new tranaaerlon is iijirlaiad via atari 
message 1S03. This message Inciades imnsaction ielortrattfon inclediog a transaction identifier and a courts of the 
bfoaks of data to be transferred. The raqaestaa htmy la a wait sisaa then enters a data «ali state 1 305. 

The server enters a data transmit state 1S06 and iraaamifs a issocK of a;j!a ;90? and -hen sraera a wsit tor ac- 
-sc S<novirisdgemenf: stare f 908 . As She oafa ts received, the rsquesief enters a data receive stale I90S arrd when the data 
btocks are completeiy received !i enters aa acknowledgamanr stata J 910 and transmits an Achaowiedgemanr message 
1911 so the serves. 

li ihere are more bfeckstosend, the server waiss unhi recewrsg an AeknowSsdgsmem message from the requester. 
When m Aakaawiedqer;;an; message is f sewed it sends the next bioek ta the requester and agam waits tor ackaouirl" 
*s edgamarjf The reqsrester tsfeo repeats the same cyefe of states. 

ft ine sesver detects a communications failure before ssngme the sast elr>:k. if entsrs a cancellation slats s 91 £ 
wherein iha transaction la cancelled- Similarly if the sequester detects a communications laiiate Pafote fecesVmg the 
last block It enters a caneeii'aiSoa slate t3l3 

Jl these are no snore blocks t&send, tha server commiss to the transaction asid rrvasts for the hnal Aaksiowiedgemeni 
5e in ssets tat 4 if there is a aornairjnieailons :arjure astors the serves receives iha Irnal AcScnnwiefigemsnt massage, it. 
st jr ieomrmss to tbet ran sseiioo. but Ineiadesa report stomi the event ts ite credit server in stets 1 9 5 5. This report serves 
two purposes. It witl hasp legiifmlue any claims by a wet of having bean Sailed tot receiving digital works that were riot 
compieSeiy rsjeewed. Also i; heips ic idenfrfy r^apcsifoiles and cmtrnuriiesittom Unas thai have suspicious patfosns of- 
use and inierrispsion. The server ihen enters its completion state 1916. 
•ss Oi? iha i equester «;de, when iha:: a a; e no ma; a Sj(os*s to secssva, the raqeeatar corwitts to tt-a transaction sa atstrta 

1917. if the requester detects- a commanicattans taittire at Shis siate. it reports the fasinre So its credit server sn stale 
l &iS, oatstiri commits sof hs transaction. When ts nss commirieo. tt sends an acknovffedpesnsnt message to the server 
The server then eaters Its completion stale 191 9. 
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Tm my property is thai bosh the servar arid- the rso.!.tesier canoe! a transaction if it $ interrupted netoce al! ot ihe 
tteta biocks sra delivered, and commas fo it if att o! the data blocks have seen dativerad. 

There is a possjRti&y that the servsf ma nave sent aii of «ss daia bsscfcs (and commnted} but 1he requester wiii no? 
have rscsivsd as o! them and wat eanoei ths transaction, in this case, both repositories w;ii preswrfafety detect a eorn-- 
•5 manleakoos faiiuie m\d report tt to tnssr credit server Tim ease wit probably be rate sweb a <s«ps;-nds on vety precise 
tsmingo? the cemmiinisaiions faiure. Tor* onfy cons^qtmncs will be that th3 user s! me f-eouester repository may ura- 
tes request a rotund from she credit savess - and 9\b ease lor thai refund wiil be doswmnt&a by ieooris 05; both 
repositories 

To prevent toss a? cfsxa. She server snoutd not deieie sny transterred digiiai work until receiving, the fmai acknowh 
?<5 edgemeni irom ths molester. But it also shoutd not use the tte. A wall kn&m way so dsai with this situation is cailed 
''two-phase commi!* or ?:P0. 

Two-phase commit works as lottos. 1h& test phase works ths sam«s as the methoo dsscossd aim. Ttos server 
sends a" at She data so She requester. Sot?; reposrSorres- mark transaction (and appropriate sites; as uncorrsmifted. 
The server savss a reafy-io-canmii message to m fsqusster; The raqaesfer sends bade, an acknowisdgsmenf. Th* 
« ssiv«! men cowr^s and sends tits rsqusster a commit message. Wh«r> the regjsstei receives the commit message, 
st commits the U», 

if thsto ss a oommurms&en fete* or other the revues; er must chsc-i sack ytm ths server to oofermis'se ihe 
status 0: the transaction "The server has the last word on ibis. The requester may have receives aii ot ;ne data, but tf 
st did not the sinst msssage. * has not coromstJsd The mww cm go tshead and datets fifes ioxcept Jot ;raf}Si*ciion 
fasotdss ones a ccrmiits. stnes ths titas are known to nave »«ss« tusy trsrmsftEsd br^ora startina ttis 2PC eyefe. 

There sre wmssom toovw tn ths aa vvhsch can bs used to son lave tha same offset For axarnpts. tha server couid 
use an addihona! iaval of es'ics'ypitoi? whan transmitting a work lo a ci»mt On<y a'ia; tho cisent sst?ds a ntassagra ac- 
tsiowtedging receipt cfexss « sand the kay Tb* citant than agtsas to ptty taf the d^sta! wotK. TTra point of thss vanatton 
;s that it pfOVides * ctaa: audst \nn\ tha: tne ctscnt received ths work ?-;x trcsisd sysian-:s. hows/ver. this variation ao'd& 
a tavei of encryption tor t\o tml S««n ;n aceoant:ats)if;y. 

Tne trarisactsori tor specific usage nnhts » no 1 * discasseo. 

Th« Cajsy Tfansaisifen 

A Copy transaction Is a request to make ona or more ifsdependstit copies of the work with the same or issaer 
astrga nghis. Copyait't'srs from tne extraction ngj-rt oisc • rased -afat in Jhst it refers to onttfadsgitai worttsor seiiirs foidsrs 
containing digitat *orks, A copy operation cannot be used to ri?n"tovo a ponion of a dioftai work. 

* The requester sands ths serve? a message so initiate ths Copy Transaction Tbss message trsdieatss ths work to 
3S pa copied, the version ot the copy right to be used for the transaction, the destination address intormation tlocaiion 

tn a toiderj to; piacinp tho work, ths file dafa for me week (fnoiadtng sts size!, aiid ttto number of copies requested. 

* The repositories perform ths common opening transaction steps. 

* Ths aosve; hansmita the roqaostad contents a;id data to the ciloni sccoidir;9 to ths transmission protocol « s 
Nex;-Set-Of-Rfi|hte ttas dean pttywSexi in ths version r>t ifte r;?|ht ; tnose isatjfs asa ir-intsin iiteit as the itqhit; tor the 

•a> Othsnvise. the rights of the origma! are transmitted tn any event, the Copy-Grxsni tie id 'tor the copy of the 

digital work being seat right is set to ths nasmber-ol-copies requested, 

* The sequester rstcofdis tho work contents, data. ;*nd usage rights and store;; the work. It records ihe date nnd time 
that ihe copy was mads tn the properties ot the digitsi work, 

* Tne repositories perform tt?e coiimton cfoshg tiarisactioi; steps. 

■as 

Th$ Transfer Transaction 

\ ^ n ! s f ■! : ! ^ t t 1 l V ^ 1 i < ■! ti \ \ S "> ■) ! -J 1 ^ if 

t u\ i t r s> i t i }.>. x u ^ i!t w ^» v->^* ) <.•-' 

;'£i 

* The raqaaster sends the server a message fa initiate ihe Tramfer Transaction. This message indicafas ihe work 
to be tianslorred, th» vamion of ths .transfer right to ha ysad in ths fransadiom ihe dasfinaflon addrsss WomtatSori 
for piecing the vrosk.. tt;e fiie riata tof ti'so work, arid the nam&er of copias invoived. 

* Tne reposiforiss pertorm the common opening transaction steps, 

rta ♦ The server transmits the reqaesteS contems and data !o the ;eqnestor according to the tiansinissiof; protocoi. if 
a i^ext-SskOf-Righis has been provided, those rfghls are transmitted as the rights tor the; work. Oihei-wise. tha 
rights ot the originai ars transmitted, id either case ; the Oop^Coum ftetd tor the iransmltt&d fights are set fo ths 
nymherof •copies requested. 
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* Tm reguesier records 9m worn comsms. dasa. and usage- fights and ssorss the- we**.- 

* The ssrvsr dseromenls its copy conns by me «to ot ccpm trsvoived m ttie irans-armon. 

* The repositories perform th» cowmen closing transaction steps. 

* i; she number oi copies remaining in She ssnmr is now ,?ero s otases the dsglsai worn from ;ss memory. 

s 

The Loan Transaction 

A loan Srafiisnctioo is a meeNtn&m for Starting copies of 8 fiBgitaJ worts. The maximum duration of the lo®» is- de- 
termined by an im^mat paramoier of the digiSai we*. Works am ayiomafe% wfumed atw a pt&Metfrmm 8ms 
m period. 

» The requester- sends ths server a mssssge to mttists ths TrsnsS'sr rmn&stctfcn Th<s message mdtt&tes the work 
50 be loaned she version of she ban ngPi So bo ussd in the tsarssactKsa- iSie destination address srtfoirm&GB for 
pmfoQ she work, she rsyrarjef ot copies involved- the fife daia for ths work, and ids panod ot me wan. 

« • Ths seivgi Cheeks ibO vai-O'Sy OS ibO reOUSSied ioers peoOO' SrtCi ends v'>':;h an snO: iS -be pSnOd 'S nets VaiiO LOSiOS 

ior a loaned copy cannot sxlsod beyond trss period of itse original loan to the ssrves: 

* The- refsosstertse perform ihe common opening jransstctton steps. 

* Ths server transmsss ths requesiso contents and data so ids reoues-er » a Ns>rhSepGrR:gh;s Pas been provided. 
Ihoss iighSs are transmits.!-*! as Jhs nghts Jot ids work. Otherwise, SPe- ngtsss oi She- onginainra isansr-nsttsd, as 
njoosfsed to refract ids ioan perred. 

* Ths requestor records she digsiai work contsnis. dsta. usage rights, snct foao period and stores she work. 

* Ths serve* updates the usage rights -rstofmaSion in ihs Psotia; work so fetei ins nua?be; of oopses ioaoeO ouS. 

* s "ho -oposisonss psrioi-rTi she soiTsmoo siosing sransscsson sssps. 

* Ths sosx's: apposes iho us^ss nghSe date for She cfigssa! wo: ■>» Trx-.% rr-ay prsciuds «se- of ths work unti! si & rotund 
}«sm iSse Scbsi Ths; user on ths rsqt;oste; psasiofm can mm uss ths transferred oop;s-i; o? sno dspfei mfk. A nssr 
sccssssng the onsjsnsi repository csnnos nse s:he digital worls . osisss irsofS ?;ro coptss tomatninp What hsppsns 
rssxi dspends on tds order of svons* m sims. 

C^sst it ths isrno of sno Joan psdoo is noi yet oxhawsiad and -no r sppssf os- ssnds ino rspo«<tory o Roiiifo mossapo 

SiJ 

* The remm rnossage snoiudes mo rsqusstsr iPasPificaiion, »m she -rsasaetion iO. 

* Ths server hecremsnis she copses -sn- use fisid dy Siis numbsr of oopitss that were retumsd iii ths mrtm ci 
digiioi works returned is grsajor !bao !hs ssnratjer aeftiaiiy boaowrso'; ttsfs is {rested as an error } This a-ep may 
now rnsks iPo mrk avaiiabis ss she ssrvsr tor ofhsr ossrs 

-5S * 'ff ss rspuestsr deactivst-es iis eopiee ano removes the oonisnts f rom sis memory. 

Case a it Sbo lime of ids tossn psnod is e-xhaii&ioo ana she requester has nos yes son; a Resnos n-iessags. 

* TSse ssoivoi csanrernsnis the eopiss-sn-nsa iseici ssy ths nutnSsssr dipsiai works SSsai wsjs'o b&mvmi- 

•so * rhe-rsquester sujomaticaffy dsaeifyam'fls copies a! {he dsojtai mik it ■srmineissaiicrifren! osss ano srasss 
she dsQSal work copies from memory One puss-ion is why a rso.es ster wossid evsr rstsm a work eariier iban 
the psriGd of tSss ioan : s«« it wouid be- re-Sun-sd auiomasicaisy wymy. One reason fos sariy return is SSsat 
triers may be a nsetered foe which dc-termifiso ths eosi oi ids Joan. Ftetusmtg eariy may rsducs that tes. 

The P!«y Tmnsacston 

A piay sransaosion is a request So use ti'ss conssnis of a work. Typicaiiy, to a work is So seso ths digisai m>(k 
shraugh some kirsd of trwducsr 4 sw* as a speaker or a dispiay deyles. The t&pm impiios fhe intentiop that -be 
contents will not do tmrnxmsM Oigisai-y so my olhur system . For sxanipfe, )bsy yffl (M be sent tcs a pririses; reecrdsd 
viS on sny digitai medium, retained after the Smnsaetsod ot sen- to anosher repository. 

This tosm *j>^y* is natrsfa; for ossmpiss iike (Saying nssjsio, pfayiog a movie, or piaying a video psrtse. The gensm: 
fores of piay measss that a "player" m sjsed to use m dsgitef ms% However, the term play covers; ait nseba and kinds 
of recordings. Thus one wodki "stay" a d:gisai work, meaning, to render is, for raadirrg. or piay a oomeuter' p?-ogians, 
nsoarsing -o execute if. For a dsgi&i tickst the p-ayer wouto sjo a digital tiokei agent. 

* The repisdsier sends Sne servsr a messa.ge. So inislasb She play tfanaae-ion . This .message IdPicaias the work Jobs 
piayeo, she vssssori ot the piay right to be usse' in she transaction, ths IdsniiSy of ;ds player being used, arsd ihs fiie 
data for she work. 
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* Tm server ehseks tn» vafsdsiy o? she pisyer identification ancs she eompattbiiity of the psaysr (c&rnifsscatiori w?th Ens 
player specif-eaten st tfte fight, if ends wrm &« srrof sf these are not sahstsctory 

* Ths repositories perform tbs common oporiino, tf3mac?son steps. 

* The server and rsqooster read and wrsscthe biocks oi data ns rsoussied by me psaye: accoid<no to Ehoiiansmsssion 
•5 psoiecoS This requester piays me woskcorrEetsss. using tne pinyer. 

* When fhs player timshed. the pfeyor anc; she requester remove %te contents ttom shei? memoty. 

* The rs-positorfss psstorm me eorrertors dosing tiansactxin stsps. 

The Prtat Ttm&w&m 

A Pons tmnsassiors Is a nxfisesi to obtain the contents of 3 work forms parpose os randaring them on a "printer.* 
We use me term "porrter* to <ns&d& ss-e common esse 5* wuang wsl h toss on papsr. Howsver. me key aspeer of 'pArtting" 
in our use a! the term ss mssE ft makes a copy of th« digrEal work in a place outsde of she protection ot usags nghss. As 
w«n aii righte. this may reqt«rs padisuiar sushwsxatfcn eerfSfis&tss 

« Once a digit«i work is printed, ths publisher and am are bousid by whatever copy r sgm laws ssre in effect However, 
printing moves ih© consents outside the eonisoi of repositories, for example, aosersi any oiber enforcemers; rrsscha- 
nisrns. ones a digita; work is printed on paper, is cm be copied on mmst? photosopyittg machines wishoei isvEs-waston 
by a repository so coiiec; usa^e fees, ft She printer to a dibits! disk is parroted toon srsat digiias copy ss ousside of the 
corsssol of iss&gs rights, Bosh shs ;;rsasor and Ehe user mem Shis aishaogi's Shs orsaiof Ooas not rssscessanSy give iacsf. 

28 consent to such copying, which may violate copyright saws. 

* Ths fsquesfer sersrfs me servs? « snessaga so srsisistes a Pfsrss Sfanaasisie:'!. Ttijs snesssiga indicates shs ssKxk so tie 
psayecs. she idensay of She prsnier bmg c'sed. sno to dasa io? ihe work and !ne nrntoartX copses sn She reqsjees. 

* The server cneckj she s'alsdiiy of ihe pftmer idctuificahon e-od ths cornpeiifci!«y 0! me phrissf sasn«:«.«!ior> ^m the 
primer spscillcatior; sn me rlghs. s! oods wSts an srtof if ihasse ase oat sassssacssy 

* Trse reposiforfes pes'torc; she cor^moe opening iranssicSson steps 

* The server if&r&mite biecks of da;a accordssig so fsie trasismissson pfOToeo!. 

* Tfsa fsiqsiesfet prloss i!;e wofkooaioriis: using me pmtw. 

* When me prsnfer is finished -the pftiifcr and the requessor remove she sontsnts from ttmt m*TK»y. 

* The rspositeries perforrr? the common cSosirsg transaction sfeps. 

Th« Backup Transstctsen 

A te!«sjp sranrsachon is a reqwesi fo make a is&iUnp copy of a d^sta! worK. as a profeeiion agams; media Saslerss. 

;k in ilia contexs of repositories, secure backup copies differ from other copies in three ways: (1 > tney are made mm 
ihe s»nf!oi of a Beckys 'i!enaac!iors rashes tfsan a Copy Sssirssacfiors. {g> shay do not count as regular coptes. arsp sG; 
they arc no! ueafoie a§ regaiar copies. Goneraiiy. haokap oop-es are encrypiop. 

Alihough backup copses rrsay be transfes red os oopseci, dspersdsng m tneir asssgaed rsehJa, ts"ta oaiy way io snake 
tnem uaases fesr piaysng. pfirnr.g or asnPadOirse is io a;;;sore thosn. 

•so The osifpiiS of a Bactop opsrasion m osih an sricrypted aasa Site mat contains she consents and desoapsson of a 
work, and a restoration fife with asi encryption key for restoring the encrypted contents, in rnsny cases, the encsypied 
dssEa hie wrseid have nghis for 'pantintf it io a disk outside of me psotaof ior; system- seiysng just on its afsoypsion for 
security. Sacn Sies coaio' ee stored anywhere that was physically safe and conveniens. The restoration Esse wouS-d bs 
held in tse repository: This •sis is siesessary for the restofesitun of st Pnckup copy Si rsiey fsave fiojns for transfer beiwesn 
toposiSotse? 

» Tfse reguestss sasscSs ihe serve;- a rnessags Eo snrEsaie a foaekcp tsarsssissrEion This aiessaeo ;;Ki:caies me work to 
bs backed up. the varsson cri she backup tight !o oe iSBees sn the Sraruactm me destintsfion ;Kidraas snfftrmaSson 
)or piscina tha daakup copy, the hie dm for she work, 
Sc * Thi3 Tspcssitonss perform iEie corrsnon open sag iaiasacsior; ss aps. 

* Tne seiver transmits shs rrsqas:sted contsnts and data to ihs feqysstsr. ft a Ns«-Set-Of -Rs-bhts has been provided, 
irsosa ngnts are ■Eraiiarnrst-ed as m t>$m fa m work, Oiherwise. a set 0! defaaii rsghts for bsekep fiies of fhs 
original are ssanssTttiisd by ihe server 

* Tr?e roquester records the wofk cosisents. data and usage righis ii snso creares a ons-iime key ana encrypts me 
contents f»te. it saves m key mtormation in a sestorasion to 

* The rspcisiicnas psriorm iiie common cioBsng Esanssactioo stage. 

if} some cases, it convenient 'Eo be abia to arcPsve tde large, afjcrypted consents Isie io saccm <Mm storage. 
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sych as a magnsttxspttesi srorac-s system or magnetic iapa This eraation of a ■wr-rspoeiiory archive fiia is as secure 
as the anerypiion process. Such nora repository archive stcsfage is coasidsred a term of sprinting* and is eonlroiieP by 
a print nahi wrin a specified h;aahhre-pbnter.* An srchivs-pf inter device is programmed so save the encrypted conis-nis 
fiki $>yj not the description f; is) oifiins in stash a my ilsai it can be retrieved. 

a 

The Restore Tfensssction 

A Restore js a rsqtrsst to owtl an ancryptsd baaimp copy a? a c&g&si worN snto a usa&e cepjs A 

resiors opsnsioi is sntsnosd to ba assd to ecrnpsnssie for caiasirophtc msciss faiiwrs. L*e aii usags «gras. restoration 
» rights can wciixie f«ss and access tests including auti'sorasiiion checks. 

» The requester sends the sen/or a i-nessaa.8 ;o imi;aie a Restore transaction This message snctscaies m» work to 
be restored, tha version d the resiora ngh! fof tha iransaciion. She dast:naaon address foiorcaaison for piaaiog ths 
work, ano ine i::e data tor the work 
« ♦ The server verities thai me conssnfe fiie fe avaiiabie a.s a dipiiai v<o;k c©»essfO*>Cfin$ io She mqcesi has tfsert 
backed-upa if & is not. «t c-ads She imnsacaon ws!h an error. 

* The npeMatm psriorm the eommot? waning transaction steps. 

* The server retrieves she key from the restoration m it decrypts the mm. aorrtsnts. c&ta> sr«i usage nobis, 

* The server transmits tha requested contents and data io the roqyesSer according to fhs iransraissksn protocol ii 
28 a NsxhSeiOf- R^his has bean provided, shose ngnts are sraosm«tsd as She noots tor Vt» work Otnsrvase. a set 

of defisuii rfgh® fcs baskup Tiles o! the ortotaat are Transmitted oy iba servas:. 

* Tr-s raquesfe! sU;;es ii;e diqiiai work 

* f n« rapoa:?Gftas partcim !be sorrimoa siosiag Irarisacsion siaps. 

A Gsiate ifss-ssacf ion aisles a digrrai mtk or a numbsr copsss ot a dipjfsi work fsom a mpcsiiory. Pfactiesfiy aii 
digisai works vvosad have daieia rsghis. 

sa • Tha -eoues-rar iendi ine t-a^Sf rnes&w io ih!tei« daieia Transsciion This message ;rtd:c«ias 'hs.< work io bs 
d<5ia:<5<i. She version of the dsiaia nqhi ior !hs ssisrssrsoiion 

* 7ne rapesiionsss psrtorm ine common opening irsrnsactaan steps. 

* The sswrn dsieiaa the iite. araa-ag si fsorn tria tsi® avsiorrr 

* The repositories pariorrr: iha common ciosrnij Sransriatton stops. 

as 

the OicecSofy Transaetba 

A Dirsc;«ry IransSiCiion rs & request tor intoartaaon aboa! foid&fs, dipila) works, firnd their p&is. Tb« amosaits so 
rotigbiy m aas^a iriaa m p«3l«cSion acrioa m a corrvensionai hte syatajf - She TENEX, exeops iisat iS is ga!>srai«ari to 
-a? the f«« power oi ma access speesteascsis- at m» tissue nobis itsng^aga. 

Tns Diraetoty irshsaebon bass the smporiant ;xiie of passino along dsacnniiOi'ss of the rights and tees assocsaisd 
with a d:C|itai w-crk. W?;sn a aasr mm s io sxsreiss a ngf ■■. !hs user iraeriaco o! His ioposstory impSfcriiy rnakaa a dtrsoiary 
reqiis-sr to dsissn-iina ina va;sions oi iba ngni thai are avariabia Typicaiiy ihe&e s:ra presanted to xhn user - sucn as 
w:ti's drifeeni choices oi diiirag for axefdsing a rigbi. Tijus. rrsay {iireetoiy siar-sseiforrs are invssibis io ;he aset arrd 
aro exorcises as pari oS ihs norms! process at axercisiag w ngn;s. 

» Tr;e rsgaastss sssrds ihs ssn/ar a rnassaga to inrisaia s Dirsciosy iraiisaciion. This message tnriscaies ins iiia o; 
teteim ina; » ths rosJ-d tha riirsctory raqtsas; aad iiia vers:oa oi the dtraosory ngb; aaod tor tha trsnssrssors. 

* The servar vsrsitas trsaf ibe -{nlom^ttOR *s scc«ssife!s io 9m raquaaier. in panicniaf, it does- riot reiarn iba naraos 
S5 of any bias ihat bma a HtOE-MMilE siaias in theif-dtreciory specitiarsaons. and it does rs>i r-5tarn tse paris oi any 

ioidars or fiias ibat have HlOS-PAftTS <n ihsrr spscifiaaiicn. if the informatson is nor accesses, ina ssrvar ends 
ine iranaaction wr>h m etm. 

* The rspcssiSorass periorra iija cormson cjfsersirjg ifanaaaiion ssaps. 

* Tag ssivsr sands -na raqriasisd dasa io ths requestor according ro ins iiarisjaission protocol 
S3 ♦ TPs ieqnasiar reccrds iae datsr. 

* Ths repositories psriorra iba corrstsm ciosrng iraoarictioo steps. 
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Th« Fokfef Transaction 

A Fotaer transaction ss a rsqaest to create or rename 3 lefeter. <x io move s worn between totoers. Together w«s 
Oaeciory : ■tjhit, f-oider aohta eoniroi t.ne dep/Ce to wh:ch organ-yahon o' a sopository can bo acces-sad c." rnoo'Sied 
•5 from arsotfiar repository 

* The requester sends She server a message So initiate a Foider Sransaction, This rnessage s-tdmtss Jhe foidsrthat 
(s She tos& of the fotder request, the version of ins toidar r^hs for She transaction, an operation, mi daia. The 
operation ©so tss one of create, renams and move riie. The data are trie specifications asquiroa sbr ins opermiofi. 

?a such ss a spscitoliOfi of a totder or digstsi work ana a name. 

* The repositories perform ihs; common optmm$3 transaction stops. 

» The server performs tha revested operation ■ • creasng a foteer, warwo, a foider; or moving a work between 
Sokiers. 

* "no reposisortss partorm She somnxm siosmo. transaction asps. 
The Extract Ir&nsaefiem 

A sxisscS transaction ;s a request So copy s part ot a dioriai work and to create a new worfc containing it. Ths 
extraction opessPao differs horn copying «\ that it car; be issod to separate a pass of a dipiiai work fnam d-biocks ot 
sheiis that piace addifsonai restrictions or fses on ii. The extracfion operation differs from she edst operation m thai it 
doss not chanps she contents of a war*, onty its embedding in d-fjioeks. Extraction creates a new tiigitai work. 

* The ipqnesUtr sands she server a messape to initiate an Extract transaction This mec-sags indicates me par; ot 
the work to be e^Patied. the version ot ths extract right to be yseei tn the transaction, the- destaatioft address 
rtkstmmxsri for p^osng the part as a rirsw vroik, ma t;io daia tor the work, ami this number of copies :nv;sSvaoi. 

* '"no roposiioftss pertorrs iiia cortsfnofi opening iransacacn steps 

* The servsr jransmits ths ■•squesioa conts^ts and daia to rha reaijesiar aocordtng ro tfte tfari8;Ti:ss:r;n: protocol if 
a NexS-S^Or-Riphis hm bean p;ov(dad ; sheas r^hte ara f^ismfeed as tf;o cighis tor m mm work. Oifterwissa, 
th* righisot the oripiaas am \>mm8X®3. Tbo Copy -Cowai IM for shis rrghf js saf So tha msrm&t-GH-oo&m r oqijosted. 

so • Ths rectPsstar rseoras the coatsnts. data, and psaae riohts and atoras tiia work, it recc>:rds the date and tipis that 
now work was mado so tha pfopsitios of ths work. 

* The repositories psdorm the condor: dosing t;Bhsactron steps, 

Tho Embed Transaction 

to •strsisad aar;sactroa is a rsqusst So aiake a dtgiaai work become a pari oi another digital work or to add a shsii 
d-siopk to enahia the adding of tess by a disihbaior of too work, 

* Tito roqnestssr srsxis ;no arsrvar a ?r>as;:aga So srifiiata at> Ernnod Sransapiion Thts ino$;aago iftdicaass the wcaH to 
•so no mntmtjafi, {he vorsion of m« srnbsd n<#\l to op osed in ii>a p'ansaciion. ins dsstMtson address (nformatRW 

Sot piacinp the pari as a a work, the file da;a tor She work, and the number of eopios snvoivsd, 

* The server checks the coniroi s-pecstications for aSi o: She sights iii ths part and ihs tSestinatics*. if ihay are nconv 
patibie. tiie ssrvar oada tos transaotiop wtih an oaor. 

* The rapoaiiortss perform the comraon oporiifsg tfansacfior; steps. 

*s * Tito sorvar Snisasniris ino ivjcatosiad pontartSs and d;sta So me requester aonordtnp; ;o the transmission protocol, if 
8 NeKj-Sst-Oi-Rights nap nsen providsd, iho&s ngnts ara usnsmmsa as too nghts for the mw swxs. Gihsrwiae. 
She fights of Shsofigsnai afotran&rairiad. Ths Copy-Coynttteid for this fight is set to She aiandoi^oS -copies rsqaosSed. 

* Tho roqiiesiar reccsrsSs Sno pantanSs. data, and arsarjo s-tphta and rsrabods She work- in tha destination fiie. 

* The repositosies psrforrf; She corrssors eiosrnq transaction siepe. 

;'P 

The Edit TrsnaseSrsn 

Art Eos f rsinsaciion is s request to rftako a r;;?w dirjiisi work by copying, soiasting and mxMyxtg pojtsons oi an 
axistinq digtta! worst. 'Shis opsraiton tan ach.taiiy rmaapo ;no poniems of a tflgi'ai «o:k Tha sanda oi pnangrrs tnai ate 
•ss permitted depend on »>« process bairip used, tike the exiraehoe operation, edit operaSes on persons oi a dtgriai work, 
in contrast vsrith tho e-xiract oper;P:ioa. ooitdoos not a^eci She aphtsorioMiiiors a? the work iionty charts the contents. 
Ths ktnds of chartosa pormilfed ars dstsmiinsd »y ths type specification of ths proosesor spsoifiod in rha rights, in the 
osrr ontiy prelersed ernaodirrient, an edit f ransactioti chanrjes the work itseif as)d doe* not nsake « o*w vvork However. 
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it wouid bs a reasonable vsfi-ate to mvm a nsw copy ot tt» werk to be nwfe. 



* The requester ssnds the ssrvar a rossssga to m&sss so Edit transaction. Trus message indicates IPs work io b3 
edited, the vsrstoo of the stte figns to be used in tns transaction, the Isle data lor the work (tnefucJing sis aae), tns 

•s process-tO lor th«f proeess ; and ths nwtftssf of copies itwotvsti 

* The server checks the oomp$«b% of tfis process -:D to ee- im<$ ey the requester against any process-tO specs- 
Imttkm s'i tlia right. If they are Incompatible, ii ends ihe transaction writ; srs mot 

* The reposilorm perform Ihs eoffimon parsing transaction steps 

* The requester usss ins process to cnaene too contents oS the digital wotk as desired iFor sxampie. it csn seise! 
?<5 arsd duplicate pasts of it: cosae-rue it with other intorntauor;: os compute functions dassd or; the w&mtatom. Thss 

can amount to ndrtrnpiex;, tmsfc.. or pictures or taking ><vhatW6f oShes' stops are usstut in ereattnga derivative work. } 
» The repositories perform the coirsTion ctosiog transaction stops. 



The edit transaction is used to cover a wide range os kinds fit wor ks The category describes 8 process that takes 
« as ris mpot any portion ot a digiiaJ work and then modrtiss the input some way For example, tor text, a process for 
editing the tmi would rsQusro srfst rights. A proc lu > (! »r v t > \ < t ^ 10 * 

considered editing. For a musts isle pressing coe:« S iW;v« c. >r>' t t .. t\ < rc nc c; k t ns 

of any oUwsusfio ©Sect. For digits video worts. •> v 1 " * ^ * >■> \>> •>( •'v hh- t\ *\ " 
would bs eotofteltnj; scaling, sxtraot mg still photos n < u f* > > i ><«<•> t i s » > > * 
28 sign?!!; processing, and so on 

Some creators may mn\ to protect ihe **«ht m,» > i \ -> \ / > r xj ^ i\ N pk v? i 

peiteiiTiedoi'sition-i. si ;h«!o;sr;5 iio edj. sigt;.». the;^ ^ w j v jksvt \j>' ^< i <i ^ ! >s v. ' s d 

to sssscify «*st8 fcifsd ot prcscass <s a!»w«<i. It no is > A itn 3 ,>t > •> t' <. -\ v i >> n 
For an sxampts ot a sees* ofocsss. » smotogra \ i » ( i v - ^ i u to \ -a > n * i 
«otofl2«d. A mtisfclun ttmy vs«?>t to iiiiow sxtra o •> > > •> a is > i u \j o ^ ) 



Atfth<9f*28i fort Transactions 



Thsrs afo msoy ways thai aeinof.^stion trsosasctions can bo deisoao. in the idi'owing. o«r preiorrod my is to stmpty 
se dei'iria mm \n xmms of other tmrissactions that ws atread;/ need to repoeitones. Thu&. i! :s convenisni somatinm to 
speak ot ■tsuthor^aiioi's i!'ai-ssaos ioes. ,, &iis ihoy :sraaet;;aiiysriado epoi othsr transect sons that I'eposstons-s tsit^ady nave. 

A usaije right can specPy an avitPofiKStson-D, which identities an siuihofsxation object (s digits) work in is m of a 
siancterd fama!) that the rapoasto;y must have am wrk^ ii rtsost process The aiJihofi^sriiOi? is giver, to she generic 
auinofixstioe (orttcKdl) server oi the rspostton/ vtomn hepms ;o ioterprat shs authoi's^tstion. 
-5S As dosehpssd mdm. the author station contains a eetver ideatif-ei; wtfcft may just be the generic authori^sSion 
ssiver or rt may b« anottjer server VVtien a rmxAa aa-hosixssiten sesver is required, it rensi eontHir; a digital addtess 
it may aiso eontssn a digital cerlitieato 

it a remote iiulhor station server is required, then The auttsori^atiori process fisst pssdonrts ihs ioiiowir;g steps 



•to * The gsneriO esjt:hor«ation server attempts to sot up ins oornoienicatioes chanrisi. i!r the ceaoeai cannot bo set 
up. then atiThonrntton tails with an ersxjf.s 

* When the channel is set up, it iporfoires a registration process with the teniois repository t!i regsstraiior; faiis. ttsen 
the authonMtiOs-i laiis with an sttor.) 

* Wiisr; repistratsor; ss coinpis-e. the Qer-ene auttjcrs^aliori server Invokes s k P:iey° transachon with tha ssn^ote re- 
possoty. snpptyinq she ;tt.ithor«e;ton ooornTient m ttte digital work to be prayed, and the raiT-ots aalhoiwatton sorver 
ta program"} es it>s "pteiysr. " {it the ptaysr cannot os tound or has soms oiosr error, tP&n tes suthor«atfcn tsiis with 
srs error, > 

* Th« tsi-itnorivatioe sower then 'plays'" the exhortation This Invatves oecn/pslnp' it using sitsef the public key ot 
the mt&w reposttosY ibst tsst;sd the cestrticate or the *essson key irom >ho repositosy that i;a,ris;rr:tted it. The 

96 authorisation se-ver then peffcrms various tests. These tests vary according to the aii?!w«at;on server They 

ineiijds such stags as ceacking Issue and veisttiy oatas ot the s^hor Nation ?tnd cnacking any ixsi-iisrs ot known 
invsiid authcti'^Siiiens. The auttioriKstion servar m%, tmsw canysng out any othes transsctlons on the repository 
as sell, sijeh as cts'sckrng Oiiectones, getting some person to siippty ;s password, or pSaylng soir-e othef osglsai 
work It may atso invoke some special process tor cheeking iniornrarion about locations or rrjean; events. Tne 
"senpt* for seen steps is contained W!ih:n ;h« auttsorsitaJsOii-s scrvijr 

* it a!i of the requifeci steps are cornpiated sai;s!;5ctoriiy: sna asithonzaiiorr server compi3ts.es the transaction norrrra iiy: 
Signaling tnsa autnonxation ts granted. 
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An ir>sS3» transactes b a requ««t jo ins-si: ?• i$$m wans as runnabto software on 3 rsposiiory in s iypicei case, 
the regc-ester repository' is a rendering repository and the software woufd be & new kind or new vsrston of a p layer 
•5 Aiso in a sypscsi cases. iha software wonid be copied k> Ills system of the rsqussisr reposifoty before * k installed. 

* The requester sends the &e«v©f an install message. This message sndleaiea the work to bo snsiaiied. ihe version 
of She instati ngni being invoked aodlhatfte tittia tot the wotSs {including its m&< 

* The repositories perform She common opening transact ton stops. 

?<5 x 'i'fie requester estraeis a copy of ihe digsai eemiicaie for the software, ff iha ceriliicaie cannot be found or the 
master repository for she certificate not known to She request©: the transaction ends with m ©frc-s. 
» The requester deen/pis the ciigiiai ceristeHo using )hs fXibfo key at e(i« master ropostoy, recording tn» identity 
of Sss supplier and cfeator- a feey tot deciyetinq the software, she eompaf ibiiriy information, and a ismpsr-chscksrsg 

COdO. (MS Step CSfSifiSS !?10 S«3ft»88t*..} 

w • The requestor decrypts, ihe soiiware using the key from me certificate and computes s check coo's on '1 using a 
t -way hash function, if She check-cods does not match the iampei-ehsdeng nods t«jm the eedificais. ihs instai- 
iaiion iraosaciion ends wlih an error. (Tim step assures tbnt ;he {Stents ot ins- software, incieding ihe various 
scnpls. have oof been raiTtpersd with.; 

* The requester retrieves ihe instreeifcirns m she compafibfkiy-chacking script arid fdfows ihem if ihs aoftw&ts is no; 
compaiibie watt the repository the irsstafiatie?? hans?:c;ion ends mm m error -Tnis step checks pisiform compat- 
ibility.! 

* The requssier retrieves the snstiucifons in the installanon senpi and follows thetn. it-more is an atrot in this process 
tsuch as insufficient fissoijrees;. ih-sn ins trans ac; ton ancis wsif! an error. Hole ifru- she insiaii&tion procsssputs in$ 
Kinnabic soiiwa'Si in it place in the repossiOfV where it is no longer aeceseibfe ae a work for osensising any ussgs 
r:gf;is Gii50f Shan the «xect.:t:Of} of -he software m psst of reposskssy opafatsosis « r:anying mA rsbai transac-fona. 

* Tpe ropositofiss perh^rrs iris comnion c'osing frans?!C:ion steps. 

T,H« UnsnstaSt Ts-sosastbn 

An Unlnstsif -rafssaption Is a request to remove so&wars from a i-eposiiory- Since encomroiiop or Incorrecs r ernovai 
of s;5tisf<!;'!5 from a ispossioty <;ot;-d oorspromisa lis bahavirsral ismsgtity; th» siop is conuoiied. 

* The ftsqussief sands the sewer an Uninaiaii fneaaaqo This rrwssaps lijdscaias >ha work to be aninsSalied : iha 
version oi t he Unins-sii rsgnt bssng invoked, and ino kie d?-!a tor ihs wo* finciijosng its mm) 

3S * Tns i-oposisohss perform ihe ■eoiw-cn opening iransaction steps. 

* The raqnasier exkacia a copy of iha dfctilni cedt'tcaie for the sofiwars. if tfcs csittoi© canr;ot he foand" or ;ha 
innsier ispceifory tor ihs eenifieate Is noi known to the ii'squesier ins iiansaetion snds with an error 

* The rnqticste; checks whether the aoitvsars ta instaiiad. if iha so'fwara is not masaiied, iha iransaailon mtis with 
an airoi. 

•so * The rcquosrer aecrypis the ciigtiai cedikcaio ussno ihe pribi-c key of ino master ispcsiiory. record-nq tne identity 
oi ihe supplier and creator, a ksy tot aectypiino the software, -ha compst^HSslv inf ormaiion, and a iatnpsr-checionq 
cosia. (ftm step aiahanfscaiss the eaiishcaiion of the software, including ihe sc«pt for anniaiassing It.) 

* The requestor oecrypis. ihe soiiware using the key incm ine esi'tiiicafe and computes ?t check cods on w using a 
t -way hash function, if iha shack-cods does not .match the tampes-chscking code from the csrisficaie. iha instah 
iaiion iraristsoiion ends w;;h an aires: (Tfiis step assays tftnt iho o^-sionts o* lbs software, mskidsng ihe vsaous 
scripts, have nci been iantgersd wsth. j 

» Tha iequesies :eitievae Ihe ir;s!reeiior!a in iha ursinsfaiiaibn scapi and Soitows Ihem if iheie is a;^ 0)ror in this 
process (stjch &s instiffiotsni resources'), shoo ihe irf-nsaction ends with an error. 

* The repositoftes psrfom; the cornaior; tfomQ transse-ion steps. 

;'£i 

1 A system for controlling ihe otsfribiitiori and «se oi rjigltsi works having a mochs^nisp-r for rsporirnq ioes baserj on 
itje distributor! and use o! diijiiai wotks ; said systsrri conr^rising: 

ftisans tor ssiachiiig csags rtghts ioa dsgifst work, sseh of em nsaqs rights specifying how a digitaf vwk may 
be used or distriPuted. etsch of saih ysage tighis specify ;s>g: asage fee infoi-maitotv s«id cssge fed infoirnaliori 
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comprising a tea typa acd fas parameters which cteljn* a fes so he paid «s conosefioa mh toe sxsrclss of said 
usage nghi: 

a CKsramumcslson msfiBum tor coupling repositories so anaeis caromursieatsofs fesmsars r«positefifS: and 
a pisraiky oi mpomvxm. sach of said repositories- composing: 
•5 an eKiemsl intanaca tor renxwabiy eonpitag to said cf»r«f?jmK85kyss medium: 

storage means tor siorirsg digital worss f&ving aiiacfcsa usage rtgrtf* and fees: 

i squosiinq tri&sris for ganatakng a p^yes! to access 3 digtiai work stored srs another d sad plurality *# fspos- 
itcsftas, said request indication a paniebtef usage tight: arid 

processing means tor proeesssnsg requests io access ctigl'ai works stored >n sad storage means artcs for ge-«> 
?<5 orating feo Iransaciionawftan arsouast Indicates a usage right that ss attached ioadiglia:: work said usage 

ughf specifies jj&ags imi mfmmtxm: 

each of safes plurality of repositories oedg removabsy'souplixf to s credit server, ssid cresds server doing 
arranged for racordlng fee iiassaetions from said raposrioty and subsequsntiy reporting said Jes transactions 
1:0 a biiiing clearinghouse, 

2. The tes raponing sysiern as recited in Ciaim 1 wharaln sad lea type or said J©s iotaa-amion is a rrssisfad ass fas. 
a par use fee. a oast pace ?ea. a scheduled iee : or a mads-up fee. 

3. A meinod lor reporting tern associated with the distribution arid um of digital works in a system for controlling if-© 
28 distribution and use of ciigiiai works, said method corretfeing in® stags of 

a) sstosPing one or fnore usage iighis to a digital v*ork. each of sad one or mote usage nghss comprising an 
indicator c« haw said dsgrtoi work may be disirinuiad or used and a usage fee to be pate upon exercise of sa«s 
righs: 

3$ at stonng said digltai work and aSaonea one or mors usage rights lit! a sssvet repository, said server repository 

cor.irosiins access to sass digital wors: 

c} ssud aesvar fa&asiiory rseaiving a request to accaas ststci dsgitai work from a nsqissaang rapoaitory: 
d> said aarvar rapoatiory sdisnkfylrjg a usage dqhi assoasated mib said aaaass ragaasf: 
a) satei server raaosiiory ossam^nsop sasd iaeatsed asage «gnt ;s th3 same as um of sate m« or mors 
usags rights cached to sstd digitol work; 

i;| if ms« idenililrsd usage r^nt m not 5hs same «ss one of 83*3 osve or more as-sge rsgnis aiiacrioci to said 
digaal work, s&:d sssvar rsgosliory oanyina asoeas 10 aaid dtgitas work: 

gj <f siJaci asage itgh; :s included mn said digitot work, said serve? tsposiiory daierf?5sn:rig sf a usags foe sa 
assosiatao mm th3 sxaraise oi said asage right: 

d) If a asagelsa is fssaoclatad wslb usage right, said sarver repository caloaiatlng said usags foe: 

>} »a:d sarvar reposfeory Sraaaaslitiag a first assign lea transaction fdanifh/ing said ssgaasaag raposriory as a 

payer tor sssrd asage tea io a frrst craciii ssryer: 

ji sad fagaast:rsg rspostoy transmitting a saoondasssgr; fae trarisaollori (aaniiSy ifig said requesting repository 
as a payer for sad asacs? tm to 3 second i;reril; server: 
•so K) said servar refsosttory transrnitting said dtgitai work to sad reqaesitna repository; 

I; said ssrvsr rapostto;v a&mmsvSag a first confirm fee taansaciioa to said first oradit sasvar; and 

mt said rsquesiirig ieposlfory transailttlng a saaotxi corttitm fse iiansact:on tosasd asjooad cradst assvst 

4. Tito tTiaihad as recriad in Cialm 3 wherain sad digitoi west is coiiiprised oi a pirsrailiy of fntJ^sndatt dlgltai waiks 
aiid satd stop ot said server ealcuiailng said usage tea is farther eoinpr Ised of the step of reportsng tne arssge fees 
tor each oi the plurafity oi tadepoodoni dlgiiai wor^. 

5. Amefhod for raponing t$m assoaiairtd with the dlstohntion and pso of diglial works In a aystern ior oor-vi roil lag the 
dlssribaiioa and ps« oi dlgiiai storks, said method aoi^prislng the slops of: 

as 

a) shaehing one or raore usage rights to a digital work, each of sad ona or mors asaga rights comprising an 
indicator of how said digrlai work may fe« distriduiad or assd and a osago iaa io be paid for ssorslsa oi sad right: 

b) stofing said digliaf work and said atlacftrto ojia or mors usaae rights in a ti-m'sr ieposlifiiy said server 
repository controlling access io said digital work; 

•sa c; said server ragaaliory rssaiving a rttgaeit! to access said dlgitai work 'rasa a ioqaostlng repoeitory; 

d; said server repository identifying a usage right assodaSed with said access request 
0} said satvar rsposliory doisn-pdlng if said dlgiiai work has-atiachod fhoreio said demtfiad usage nght; 
f • if said idorsiiflad asags right Is hoi aiiachPd to said digifd work, said sstver raposiiory denyii?g access to 
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said digitai worK: 

g} if said usage tight is attached to said digttai w«tk sad server rspesitary determining if a ysage im « 
asscesHecf wstrt ihs exercise- st said «sa$s ngh-: 

ft) if a usage fee is associated with said usage nght, said server repository deiermirttrtg a fee type: 
>} said servsr tepositoty transroiitsng a first fee transaction identifying said reqaestrfig repository as a payee 
for satd usage fee tea credit server, sard first toe transaction sefsig dependent on said deierrtssned fs« tyjss; and 
k) said sesver repository ttawraRsiQ sad dsgrtsi work So said requesting repe-stey. 

§, A system for eontroiiing the distribution and i,::iJ:Kat:or- of digitai works swing & meciwiism tor reporting asags 
tees, satd system comprising: 

digital works comprising a first pert tor Coring the dsojtstiy encoded data cotrespondrng to a digitai work and 
a second part for s;ohog usage tights arid fees for sard digitai wcik, said usage rights specrfying how a digital 
wads may bs used or aistribated mi said usage fees specrtying a too so be paid inooonseiion with me exercise 
of a corrssponcsifig usage right: 

a piutairty of repositories, each of sard repositories compnssng: 

communication moans for communksftrtg v*!fh anotner ot said ptur&fty o? repositories:. 

storage msstns ior storing digitai worse: 

requesting means for genstaiiog a mpasi ta access^ digriai work stored in another of sad plurality of repos- 
itories, sard request recreating a paritcniar usage n$nl: 

processing means for processes requests to access digitai works stored m said storage rrseafis and granting 
access when sard partlceiat usage ngh; corresponds to a stored usage nght stated m said digitai work, said 
processing msarss genisr&tsrtg tm transactions when sard assess is granted and sad stored usage right spec- 
ifies a fee: 

each of said piuraiiiy ot repositories being iBmovabiy coupied to a credit server, said credit server being 
arranged for recording fee transactions 'tors said repository anc; sebsequeniiy reporting sard tea transactions 
to a biffing eisannghousa 

?. The system as recited Cfeiro S wherein said storage means is funihsr comprised of a first storage devise for 
storing said first par; of said digitai work and a second storage device for storing said second part of said dioiiai work. 

8, A method for reporting lees associated with yee of rendering digirsi works oy a rendering device in a system for 
sontroiiing fne iersdenng of digifai works by a rendering system; said rendering system composed of a rasidstsng 
repository and a reodsrieg dwm, sad rendering device utiftzms a renoe; ing digssai work tor r>snder:rtg a Oiegfai 
work, said method comprising the steps of: 

a> stormy a ttrst digssaS work :n e sen/p,- rspositoc/. said Osgitai w-erk specifying a tire! ussge tee >o be rsponed 
for a use erf sssc! first oigifat wo;k ; 

bs storing a rendering digftai work tn satd renoenng repositrsry said first moderieg s^grtai worK spentfying a 
second rssage foe :o be reporteo for a ese ot said rendering aigtiai work; 

c5 said server repository rscerwng a request to use said first digita; work from said rendering repository: 
ds satd server repository determining if said rsgess; nsay bs granted: 

p> t f said serve,- repository determines that said request may not ee gmritod. ssid server repository denying 
access fo said first digitai work: 

t} if said server tepostkxy oe-ermifiss that said request may be granted, sttid server rsposiiory transrriiitiiig 
said digkai work to said rendering repository: 

g) ssrd server repossfory traftsrriiiting a first fee transaction identifyirig sad rendering repository as a payee 

tot said first usage fee for use of seio first dtgifa! work to a first credit server: 

hj sard rendering devsce rendering said fast digital work using said randanng digttai work: and 

it saki reedering repository ifsr-ssmsfting a sesono 5ee.transa«ton identifying said rsjncianng repository as a 

payee for said second usage tee tor ase of said rendering digifai work So a second credit server; 

9, The method as recited in Ciarra 8 farther comprising ihs stop of said rendering repository iransnssttiog a third fee 
transaction identifying said rendering repository as a payee for said first usage tee tor use of sard first digitai work 
to said second credit servor 

18. TPs method as recited in Claim § whsrtsin said rendering digit;*! work is a sp; of coded rendering instructions for 
controsiingsaid rsndsring device. 
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tsm work ffigur. « i m$hu-*} 

Big ht i « (Sighs-Cods {Copy-Coast} (Control-Spec} {f ime-Spee } 
lAeeeto-Spet] {Fee-Spec}) 
fSai—Rigfet-Cotte : * Rea<kr-Co<k j Iraaspori-Cixte j Fik-Msaapajsrit- 
Codei Derivative-Works- Cede j Co«fjgwtti«B-Cod* 
f 5CM ^Rea<l«r-Cod8 ; * { Fky : {Flavor: Player- iD; | Fsisxt; (Prints* Pxiatet-lDfl 
f TraBSport-C&de ™ (Copy j Ttansfer j Loaa {Burning- Sights: 

Kaxi-Sei-of-atghtsfMCNex^ 
IS«6--Fife-Mssisgeme8t.C«de :« Backup -{Back-Up-Copy-^ghls: 

Nert-Stf-tf-SSgMs} j Restore } Dokte I Folder 
! Directory {Narao: Hide-Local j Hido-Semote} 
{Puns: Hide-Ued \ m<i«-&is&Q%*} 
f Benv-atjye-Work*-Code : - (Extract (Saifeed j SdMPMcMK 

P*ocm4D}) {Mext-Copy-Kights ; 
Nsxi-Setof Sights) 
ISOa-— CoaftgaratioH-Code : « Install } Uaiast&H 
1SW —Nexi-Set-ef-Bighi* : « {(Add- Set-Of-Bigfels>} {(Detete: 

Set-Of-Bigte}} {(Eepkee: Se*-0f- Rights )K(Ke*fj; Set-Of Xigta }) 

t$1 1 Control-Spec ; - ^Coutroi; {&8Stri«Ub!« i Us»««trtctable} 

tUach&rgeabie i CtargeeUefr 
?S?2— Time-Spee:* ({fked-feterval j SiidiBg-toterval (Meter-Time) 
Until: Expiratioa-Dete) 
?5f3-~Fised4atemi;~ From: Start. Time 
1514 --SIMmg-lBfervsl .- ~ Interval: t?s^Bura*ie& 

■ Aecea«-Sp«c := (|SC; Seeuri^Ckss) {A«theri2aision: Authorities®*} 
(Othsr-Aathodaaiioa: Atttfccmatio»>ID*} (Ticket: Tkkst-SBj) 
?Sf 7«~F«*.gpw: « {SchesiaM-mscouat} Seguiar-Fe*S&ec j Sehedukd-Fes-Spee j 
Martep-Spee 

15W --■-Sched«ied-l>ke&usfc ~ Schedukd-Discotmt: {Sehediikd-Biseouat: 

(Tims-Spec Perceatago)*) 
tSfS— Esguisr-fee-Spee - ({Fee; j Iseeailvec) fFer.Us«-Sp«c)Mai«re*Sate- 

Spee | BestPriee-Spe j Call-For-Pnc^Spec} 
{Mia: Meney^MiPer. Tim«vSpec}fMkxt 
itoey-Uait Per; Time-Spec} To: Aecoast-ffl} 
15M — Pe*.ir8e-SfKse;« Per- Use: Messy-unit 
1521 ^M*t**«d>Bate-Spe« ; ~ Metered: M«Msy»Uafc For; Tims-Spec 
t5S2—Best-Prie«*Sp«e c ~ Bsst-Priee: Maaey-umt Sta: Meney-urni 
?525-~-Caii>For-Fyiee-S|>eo : ~ Call-Far -Price 
?524— .S*hed8led.Pe*«Sp«6:~ (Sciseduk: (Tisse-Spes Seguiar-Fee-Spec)* ) 
J51S--.-Msi-k«p-Speo: ~ Markup: percssUgs T©: Acomat-H) 
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DOUMitNTS CONMsH-lRSD TO M RH.SI.VaNT 



W0-A-S2 ZSm (DIGITAL ?Qlfl«i«T COR?. ) 

* page 4S> )im W - page §4, line 1? » 

transact* ass of im immm. w 
mmms of japan, 

vol, £?3, no. ?, Jy;y 1SS8 TOKYO OP, 
pages 033-1146, X? 
HOSI £1" Al. "SUPBtOSSTRtfeUnOfc; TH£ 
COHC£?>T A8P TH£ ARCHITECTURE 

* pa<?e ms, left column, iu;s 1? - 
1136, Isfi colas**, line 48 * 

l'S-A-5 291 536 (HiTA) 

* the »heU faamnt * 

sb-a-2 Be m i$m mcmmim wt) 

* page 3, iw 11 ■• page 28, Hne 15 * 
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